Last 7 Days (July 25 – July 31, 2026)
LoRA fine-tuning can create intruder dimensions: new leading singular vectors of the updated weight matrix $W+BA$ that are nearly orthogonal to all pretrained singular vectors and that drive catastrophic forgetting. Since their discovery, no theory has predicted, layer by layer on measured spectra, when they appear. We derive a per-layer critical update strength $s^\ast=\barθ/(γσ_1(BA))$, computed from the measured spectrum of $W$ alone through the rectangular spiked-deformation transform, together with an exact secular-equation characterization of the updated spectrum, with no fitted parameters. In a pre-specified study spanning four dense Transformer families, a state-space model, a mixture-of-experts model, and an encoder-decoder (18 adapters, 9{,}840 layer scans), the law localizes the empirical threshold within a factor of two on $82\%$ of layers, separates intruder-bearing from intruder-free layers at deployment with a mean AUC of $0.89$, holds unchanged on six third-party adapters, and predicts where WikiText-2 perplexity begins to degrade; a combination of the two pre-specified edge evaluations reaches $98\%$ and is confirmed out-of-bag on the external adapters ($0.997$). Full fine-tuning disperses its update far below the threshold of every layer, which resolves the asymmetry between LoRA and full fine-tuning. Norm-matched interventions confirm that threshold-crossing layers, rather than update magnitude, carry the forgetting, and a spike-budget rule derived from the thresholds, requiring one SVD and no validation sweeps, reduces forgetting by $62\%$ on the most fragile model at no task cost.
Primary: Technical University of Munich
All Institutions: Technical University of Munich
This paper has profound broader impact on the field of machine learning, particularly for large language models and efficient fine-tuning. 1. **Fundamental Understanding**: It provides a foundational theoretical understanding of catastrophic forgetting in LoRA, moving beyond empirical observation to a predictive, quantitative law. This shifts the paradigm from "what happens" to "why and when it happens." 2. **Practical Tools for Practitioners**: * **Fragility Audit**: Enables pre-training audits to predict which layers are prone to forgetting, allowing for proactive design choices. * **Strength Calibration**: Offers a method for calibrating LoRA strength without costly validation sweeps, saving significant compute and time. * **Layer-level Blame Assignment**: Identifies specific layers responsible for forgetting, guiding targeted interventions (monitoring, merging, repair). * **Adapter Auditing**: Provides a quick, post-training method to assess the forgetting risk of third-party adapters. 3. **Future Research**: The work opens new avenues for research in PEFT, spectral analysis of neural networks, and forgetting mitigation strategies. It provides a strong theoretical baseline for developing more robust and efficient fine-tuning methods. 4. **Architecture Agnostic Insights**: The demonstration that the law holds across Transformers, SSMs, and MoEs suggests a universal principle underlying weight matrix updates, which could have implications beyond LLMs. The ability to predict and control forgetting *before* training, based purely on the pretrained spectrum, is a significant leap forward. The paper "The Intruder Threshold: A Spectral Law for LoRA Fine-Tuning" presents a groundbreaking theoretical framework and extensive empirical validation for understanding and mitigating catastrophic forgetting in LoRA fine-tuning. By deriving a per-layer critical update strength from the measured spectrum of pretrained weight matrices, the authors provide a universal law that accurately predicts the emergence of "intruder dimensions" – new singular vectors driving forgetting – across diverse LLM architectures and third-party adapters. This work not only offers a fundamental understanding of the LoRA forgetting phenomenon but also translates directly into practical tools for pre-training fragility audits, calibration without validation sweeps, layer-level blame assignment, and a spike-budget rule that significantly reduces forgetting, marking a significant advancement in efficient and robust LLM adaptation.
The methodology is exceptionally rigorous and well-structured. The paper introduces an "exactness ladder" for analyzing the updated weight matrix $W+BA$. The "exact rung" leverages standard thin-SVD updating and a secular equation derived from a determinant identity, allowing for precise computation of singular values and overlaps from a small "core matrix." This is a crucial practical contribution, making 9,840 layer scans affordable. The "universal rung" then introduces the core theoretical contribution: a per-layer critical update strength $s^\ast$ derived from the rectangular spiked-deformation transform, assuming generic spike directions. This provides a predictive law with no fitted parameters, evaluated on the *measured* spectrum of $W$. The authors meticulously address the empirical measure's discrete nature by introducing an evaluation point $z_0$ and rigorously analyzing its sensitivity, ensuring the prediction's robustness. The "intermediate rung" incorporates alignment corrections, demonstrating how real adapters deviate from generic positions. The pre-specified validation protocol, with clear go/no-go gates and falsification bars, is a strong methodological choice, enhancing confidence in the results. The theoretical framework is sound, connecting advanced spectral theory to a practical and pressing problem in LLM fine-tuning.
The experimental evaluation is outstanding in its scale, rigor, and diversity. The study spans four dense Transformer families (Qwen2.5-7B, Llama-3.1-8B, Mistral-7B-v0.3, OLMo-2-7B), a state-space model (Mamba-2.8b), a mixture-of-experts model (OLMoE-1B-7B), and an encoder-decoder model (FLAN-T5-XL), totaling 18 adapters and 9,840 layer scans. This breadth ensures the universality of the proposed law across diverse architectures. Key results include: 1. **Localization Accuracy**: The law localizes the empirical threshold within a factor of two on 82.2% of layers, significantly exceeding the pre-specified bar of 70%. 2. **Deployment Classification**: It separates intruder-bearing from intruder-free layers at deployment with a mean ROC-AUC of 0.89, providing a strong predictive capability. 3. **External Validity**: The law holds unchanged on six third-party adapters (including QLoRA), demonstrating its independence from specific training recipes. 4. **Forgetting Prediction**: It accurately predicts where WikiText-2 perplexity begins to degrade, with a Spearman correlation of 0.86 between the PPL knee and the median empirical threshold. 5. **Causal Intervention**: Norm-matched interventions confirm that predicted-supercritical layers carry disproportionately more forgetting (up to 240x more PPL increase), establishing causality. 6. **Practical Control**: A spike-budget rule derived from the thresholds reduces forgetting by 62% on the most fragile model at no task cost, requiring only one SVD and no validation sweeps. 7. **Asymmetry Resolution**: The paper resolves the asymmetry between LoRA and full fine-tuning, showing that full fine-tuning disperses its update far below the threshold of every layer, while LoRA concentrates it. The "edge-variant analysis" and "anti-alignment bias" dissection further refine the understanding and predictive power. The negative result on Wedin condition for rotation control is also informative. The experiments are meticulously designed to falsify the hypothesis, and the results overwhelmingly support it.
The paper provides excellent reproducibility details. It specifies training parameters (AdamW, learning rate, schedule, batch size, sequence length, steps, seed, target modules), evaluation metrics (WikiText-2, GSM8K, HellaSwag), and software versions (PyTorch, Transformers, PEFT). The authors state that "Full per-layer data (spectra, scan curves, and probes) and the analysis code accompany the submission as supplementary material," which is the gold standard for reproducibility. The reported training-seed variance and cross-seed agreement further bolster confidence in the robustness of the findings.
The authors transparently discuss limitations: 1. **Adapter Recipe Homogeneity**: While tested on diverse base models and third-party adapters, the authors' own adapters use a single recipe ($alpha=2r$), and most base models are tested on a single task family. 2. **Single Training Run**: Most configurations are single training runs, though stability checks with three seeds are reported. 3. **Intruder Criterion Choices**: The intruder criterion inherits choices of $epsilon$ and top-$k$ from prior work, though sensitivity analysis shows robustness. 4. **Anti-alignment Bias Residual**: While dissected to within grid resolution, a small residual bias remains. 5. **Edge Evaluation Performance**: The primary full-edge evaluation can be weaker on certain module types, though the bulk-edge variant and their geometric mean effectively repair this. 6. **Transferability of Calibration Constant**: Transferring the calibration constant across model families is untested. These limitations are minor in the context of the paper's overall scope and strength, and the authors proactively address many of them through sensitivity analyses and alternative evaluations.
This paper has profound broader impact on the field of machine learning, particularly for large language models and efficient fine-tuning. 1. **Fundamental Understanding**: It provides a foundational theoretical understanding of catastrophic forgetting in LoRA, moving beyond empirical observation to a predictive, quantitative law. This shifts the paradigm from "what happens" to "why and when it happens." 2. **Practical Tools for Practitioners**: * **Fragility Audit**: Enables pre-training audits to predict which layers are prone to forgetting, allowing for proactive design choices. * **Strength Calibration**: Offers a method for calibrating LoRA strength without costly validation sweeps, saving significant compute and time. * **Layer-level Blame Assignment**: Identifies specific layers responsible for forgetting, guiding targeted interventions (monitoring, merging, repair). * **Adapter Auditing**: Provides a quick, post-training method to assess the forgetting risk of third-party adapters. 3. **Future Research**: The work opens new avenues for research in PEFT, spectral analysis of neural networks, and forgetting mitigation strategies. It provides a strong theoretical baseline for developing more robust and efficient fine-tuning methods. 4. **Architecture Agnostic Insights**: The demonstration that the law holds across Transformers, SSMs, and MoEs suggests a universal principle underlying weight matrix updates, which could have implications beyond LLMs. The ability to predict and control forgetting *before* training, based purely on the pretrained spectrum, is a significant leap forward. The paper "The Intruder Threshold: A Spectral Law for LoRA Fine-Tuning" presents a groundbreaking theoretical framework and extensive empirical validation for understanding and mitigating catastrophic forgetting in LoRA fine-tuning. By deriving a per-layer critical update strength from the measured spectrum of pretrained weight matrices, the authors provide a universal law that accurately predicts the emergence of "intruder dimensions" – new singular vectors driving forgetting – across diverse LLM architectures and third-party adapters. This work not only offers a fundamental understanding of the LoRA forgetting phenomenon but also translates directly into practical tools for pre-training fragility audits, calibration without validation sweeps, layer-level blame assignment, and a spike-budget rule that significantly reduces forgetting, marking a significant advancement in efficient and robust LLM adaptation.
Standard vision-language models (VLMs) suffer from Moravec's paradox: they excel at complex offline visual reasoning but struggle with simple streaming perception tasks and process them inefficiently. We present Mage-VL, an efficient codec-native streaming foundation model for real-time multimodal understanding and interaction. At its core, our custom tokenizer, Mage-ViT, replaces uniform frame sampling by selectively encoding dynamic, entropy-rich regions using motion vectors and residual energy across sparse anchor (I) and predicted (P) frames. Operating at a 16 x 16 patch level, this reduces visual token consumption by over 75% while preserving spatiotemporal context. Trained from scratch on approximately 560M unlabeled images and 100M unlabeled video frames, Mage-ViT matches or outperforms flagship encoders trained on billions of image-text pairs. We establish AI4AI data pipelines encompassing prompt-code joint optimization for multimodal captioning and AI-driven performance diagnosis to guide training recipes. Furthermore, through a bio-inspired dual-system architecture - a lightweight System 1 event gate and a causal System 2 decoder - Mage-VL enables proactive streaming perception. Extensive evaluations show that Mage-VL-4B matches Qwen3-VL-4B on static tasks while achieving strong gains in video understanding and 2D/3D spatial reasoning, with up to a 3.5x wall-clock inference speedup, and comprehensively surpasses the 15B Phi-4-reasoning-vision baseline. Beyond model artifacts, we deliver seven key empirical findings covering pre-training data efficiency, variable-resolution scaling, codec system acceleration, VideoQA SFT redundancy, motion-spatial synergy, AI4AI data pipelines, and Zero-Vision SFT for multimodal RL.
Primary: Microsoft
All Institutions: Microsoft
Mage-VL introduces a novel codec-native streaming architecture that significantly enhances the efficiency and real-time capabilities of multimodal foundation models, marking a substantial advancement in the field of efficient AI.
The paper proposes Mage-VL, a codec-native streaming multimodal foundation model designed to address the inefficiency of standard VLMs in real-time perception tasks. The core innovation lies in the custom tokenizer, Mage-ViT, which replaces uniform frame sampling with a selective encoding mechanism based on motion vectors and residual energy across sparse anchor (I) and predicted (P) frames. This approach aims to reduce visual token consumption by over 75% while preserving spatiotemporal context. The architecture employs a bio-inspired dual-system design: a lightweight System 1 event gate for proactive streaming perception and a causal System 2 decoder for complex reasoning. The training pipeline leverages AI4AI data generation, including prompt-code joint optimization for multimodal captioning and AI-driven performance diagnosis. The methodology represents a significant shift from static, high-token-count VLMs toward efficient, video-native architectures that mimic biological attention mechanisms.
The authors report extensive evaluations demonstrating that Mage-VL-4B matches Qwen3-VL-4B on static tasks while achieving strong gains in video understanding and 2D/3D spatial reasoning. Notably, the model achieves up to a 3.5x wall-clock inference speedup and comprehensively surpasses the 15B Phi-4-reasoning-vision baseline. The training was conducted on a large-scale dataset of approximately 560M unlabeled images and 100M unlabeled video frames, showing that the custom tokenizer matches or outperforms flagship encoders trained on billions of image-text pairs. The inclusion of seven key empirical findings (covering data efficiency, scaling, acceleration, redundancy, synergy, AI4AI pipelines, and Zero-Vision SFT) provides a robust empirical foundation for the claims. The results suggest a high technical impact, particularly for applications requiring low-latency, high-throughput multimodal processing.
The paper provides a project page, code repository (GitHub), and model weights (Hugging Face), which significantly aids reproducibility. The detailed description of the Mage-ViT tokenizer, the dual-system architecture, and the AI4AI data pipelines offers sufficient methodological detail for other researchers to replicate the core components. The mention of specific training data sizes and the open-source nature of the artifacts further support reproducibility efforts.
While the paper highlights significant improvements, potential limitations include the complexity of the custom tokenizer implementation, which may require specialized hardware or software optimizations to achieve the reported speedups. The reliance on AI-generated data for training raises questions about the potential for model collapse or bias propagation, although the paper claims rigorous diagnosis. Additionally, the performance on extremely long-horizon video tasks or highly dynamic scenes with rapid motion might present challenges that are not fully detailed in the abstract. The "System 1/2" terminology, while intuitive, is a metaphorical framing that may not strictly align with neuroscientific definitions, potentially leading to misinterpretation of the architectural choices.
The development of efficient, real-time multimodal models has significant implications for robotics, autonomous systems, and interactive AI applications where latency and computational resources are critical constraints. By reducing the token count and improving inference speed, Mage-VL enables more accessible deployment of powerful VLMs on edge devices. The use of AI4AI pipelines for data generation also highlights the growing role of automated systems in scaling model capabilities, which may accelerate the pace of AI development but also necessitates careful consideration of data quality and ethical implications. Mage-VL introduces a novel codec-native streaming architecture that significantly enhances the efficiency and real-time capabilities of multimodal foundation models, marking a substantial advancement in the field of efficient AI.
Long-term memory systems store what a user says in an external store and retrieve it when a related query arrives. This interface rests on an assumption so natural that it is rarely stated: a memory that is needed will resemble the query that needs it. World knowledge breaks the assumption. A tree-nut allergy should change the answer to a macaron request through their almond-flour ingredient, yet the two texts share no cue a retriever can see. We call this failure mode the implicit-association blind spot and introduce InMind, a 125-task, expert-verified benchmark spanning ten life domains, with 113 tasks grounded in citable public sources. Its paired controls separate three explanations that existing evaluations conflate: the fact was never stored, the model lacks the bridging knowledge, or the fact was stored and never surfaced. The verdict is clean. With the decisive memory placed in context, the backbone answers 84.0 percent of indirect queries; when the same memory must be retrieved, six vector, graph, and agentic memory systems reach at most 14.4 percent, even though they recall the same facts on demand at up to 100 percent. An embedding with eight times the dimensionality raises answer-blind target recall for every system yet leaves the gap essentially intact. A minimal diagnostic probe that keeps memory visible before the query arrives recovers most of the gap, locating the failure in the query-conditioned interface itself and pointing to routing, deciding which facts must stay visible, as the open problem InMind is built to score.
Primary: Unknown (Paper lists authors but no explicit institutional affiliation block; authors appear to be from various institutions or independent researchers)
All Institutions: Unknown
InMind presents a critical diagnostic benchmark that exposes the "implicit-association blind spot" in retrieval-based memory systems, demonstrating that current architectures fail to apply stored facts to indirectly related queries despite high direct recall rates, thereby highlighting the urgent need for improved routing mechanisms in agent memory design.
The paper introduces a novel diagnostic framework for evaluating long-term memory in language agents, specifically targeting the "implicit-association blind spot." The core methodological contribution is the construction of the InMind benchmark, which rigorously separates three failure modes: storage failure, missing bridging knowledge, and retrieval failure. The benchmark design is sophisticated, using paired controls (direct vs. indirect queries) and an answer-blind target recall metric to isolate whether the memory was actually retrieved. The theoretical framing of the "retrieval hypothesis" provides a clear, falsifiable prediction about the limitations of query-conditioned retrieval systems. The approach of using source-grounded, expert-verified tasks from public domains (FDA, OSHA, etc.) ensures high factual grounding and reduces the risk of LLM-generated hallucinations in the benchmark itself.
The experimental evaluation is comprehensive and compelling. The authors evaluate six state-of-the-art memory systems (A-RAG, xMemory, Mem0, A-Mem, HippoRAG 2, MemoryOS) across vector, graph, and agentic paradigms. The results are stark and significant: while systems achieve near-perfect scores on direct recall (naive queries), performance on indirect queries drops to single digits (max 14.4%), despite high target recall in some cases. This clearly demonstrates that the failure is not due to forgetting or lack of model capability, but rather the structural inability of retrieval mechanisms to surface relevant information when semantic similarity is low. The ablation with larger embeddings (text-embedding-3-large) shows marginal gains, reinforcing the argument that the issue is architectural (routing) rather than representational. The "always-in-state" probe effectively isolates the bottleneck, showing that visibility of memory is the key factor.
The paper provides detailed descriptions of the benchmark construction pipeline, including the use of LLM extractors, filtering criteria (similarity, conflict, expert verification), and the evaluation protocol. The source-grounded nature of the tasks (113 out of 125) allows for independent verification of the knowledge bridges. The inclusion of specific prompts for the judge models and the extractor enhances reproducibility. The authors state that the benchmark and harness will be released publicly, which is standard for high-quality benchmark papers. The use of a fixed background trace (LME-s) for injecting memories ensures consistency across evaluations.
The benchmark size (125 tasks) is relatively small, which may limit the statistical power for fine-grained comparisons, although the effect sizes reported are large enough to be robust. The tasks lean heavily towards health, safety, and compliance domains, which may not fully represent other areas like personalization or creative assistance. The reliance on GPT-5-mini as the answerer and judge introduces potential bias, although the authors acknowledge this and use an answer-blind judge for target recall to mitigate it. The "always-in-state" baseline is a simplification and does not account for context window limits or privacy concerns in a real-world deployment, serving primarily as a diagnostic tool rather than a practical solution.
This paper has significant implications for the development of reliable AI agents. By highlighting a fundamental flaw in the dominant retrieval-augmented memory paradigm, it pushes the field towards more sophisticated routing and state-management mechanisms. The findings suggest that current memory systems may give a false sense of reliability, as they appear to "remember" facts when asked directly but fail to use them when contextually relevant. This has serious safety implications, particularly in domains like healthcare and finance, where missing an implicit association could have severe consequences. The benchmark provides a necessary tool for the community to measure and improve the robustness of agent memory systems. InMind presents a critical diagnostic benchmark that exposes the "implicit-association blind spot" in retrieval-based memory systems, demonstrating that current architectures fail to apply stored facts to indirectly related queries despite high direct recall rates, thereby highlighting the urgent need for improved routing mechanisms in agent memory design.
Visual generation increasingly requires high-resolution images, long videos, and multimodal context, making the quadratic cost of full attention prohibitive. We introduce Chimera, a hybrid visual diffusion backbone with a principled scaling recipe. Chimera processes text, image, and video tokens in one raster-ordered stream without positional embeddings. It combines Kimi Delta Attention (KDA) for long-context state tracking with O(N) complexity, interleaved Multi-head Latent Attention (MLA) for direct global interaction, and modality-aware short convolutions for local spatiotemporal context. Sparse Mixture-of-Experts (MoE) layers expand capacity while controlling activated compute. To scale this heterogeneous architecture, we introduce HeteroP, a module-wise scheme that transfers hyperparameters across width and depth according to each tensor's functional fan-in and model depth. HeteroP yields a consistently tuned family used to fit Chinchilla-style compute-optimal laws for activated model size, training-token count, and image-video data ratio. Guided by these laws, we train an 11B-parameter Chimera with 2B activated parameters. Experiments show three results. First, measured by pretraining diffusion loss, the dense backbone is 1.7x as compute-efficient as a matched full-attention Wan-2.1 2B baseline, while the complete system reaches 7.3x. Second, without length-specific fine-tuning, Chimera extrapolates zero-shot from 5-second training clips to 30-second videos, with only 6.5% FID degradation in the last five seconds. Third, the fitted laws show that compute-optimal image pretraining divides compute nearly evenly between activated model size and training-token count, whereas video pretraining modestly favors model size at higher budgets. These results establish a foundation for designing and scaling efficient long-context diffusion architectures.
Primary: Shanghai AI Laboratory
All Institutions: Shanghai AI Laboratory, Zhejiang University, University of Oxford
[One sentence main contribution]. This paper introduces Chimera, a hybrid visual diffusion transformer with a novel scaling recipe and attention mechanism that significantly improves compute efficiency and enables long-context video generation. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The Chimera architecture represents a significant step forward in efficient visual generation by effectively combining multiple attention mechanisms and MoE layers to handle long-context dependencies without the quadratic cost of full attention. The HeteroP scaling scheme provides a practical and principled way to scale such heterogeneous architectures, addressing a key challenge in modern deep learning. The empirical results, including the efficiency gains and zero-shot extrapolation capabilities, demonstrate the practical value of this approach. The derived scaling laws offer actionable insights for future research in model scaling. Overall, this is a high-quality paper with strong technical contributions and significant potential impact on the field of computer vision and generative AI.
The paper proposes "Chimera," a hybrid visual diffusion transformer backbone designed to address the quadratic complexity of full attention in high-resolution generation tasks. The architecture is novel in its combination of Kimi Delta Attention (KDA) for long-context state tracking, Multi-head Latent Attention (MLA) for global interaction, and modality-aware short convolutions for local context. A key methodological contribution is the "HeteroP" scaling scheme, which transfers hyperparameters across width and depth based on functional fan-in and model depth, enabling a principled scaling recipe. The approach of processing text, image, and video tokens in a single raster-ordered stream without positional embeddings is also a distinct architectural choice. The integration of Sparse MoE layers to expand capacity while controlling activated compute adds another layer of engineering sophistication.
The experimental section provides strong empirical evidence for the proposed method. The authors report that the dense backbone is 1.7x more compute-efficient than a matched full-attention baseline (Wan-2.1 2B), and the complete system is 7.3x more efficient. They demonstrate zero-shot extrapolation from 5-second to 30-second video generation with minimal FID degradation (6.5%). The paper also presents "Chinchilla-style" scaling laws for activated model size, training tokens, and data ratios, offering valuable insights into the compute-optimal allocation for image vs. video pretraining. The results are robust and directly support the claims of efficiency and scalability.
The paper provides a detailed description of the architecture, including the specific attention mechanisms and the HeteroP scheme. The mention of specific components like KDA and MLA suggests a reliance on established or recently published techniques, which aids reproducibility. The authors provide a clear scaling recipe and report on hyperparameter transferability. However, as is common with large-scale diffusion models, full reproducibility would require access to the specific training data ratios and exact computational resources, which are likely detailed in the appendix or supplementary materials. The code repository URL is not explicitly provided in the text snippets, which is a minor drawback for immediate reproducibility.
The paper does not explicitly discuss the limitations of the Chimera architecture. Potential limitations might include the complexity of training a hybrid architecture with multiple attention types and MoE layers, which could lead to instability or difficult convergence. The reliance on KDA and MLA, which are themselves complex mechanisms, might introduce overhead or specific failure modes not present in simpler transformers. Additionally, the zero-shot extrapolation to 30-second videos, while impressive, may still suffer from quality degradation or coherence issues over very long durations, which is a common challenge in video generation. The paper also does not discuss the inference latency or memory footprint in detail, which are critical for practical deployment.
The work has significant implications for the field of generative AI, particularly in video and high-resolution image generation. By providing a more compute-efficient architecture, it lowers the barrier to entry for training large-scale diffusion models, potentially democratizing access to high-quality generative tools. The insights into scaling laws for activated parameters and data ratios are valuable for the broader community of researchers and practitioners working on large models. However, the potential for misuse in generating deepfakes or misleading content remains a concern, as with any advanced generative model. The authors should consider discussing these ethical implications in the broader impact section. [One sentence main contribution]. This paper introduces Chimera, a hybrid visual diffusion transformer with a novel scaling recipe and attention mechanism that significantly improves compute efficiency and enables long-context video generation. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The Chimera architecture represents a significant step forward in efficient visual generation by effectively combining multiple attention mechanisms and MoE layers to handle long-context dependencies without the quadratic cost of full attention. The HeteroP scaling scheme provides a practical and principled way to scale such heterogeneous architectures, addressing a key challenge in modern deep learning. The empirical results, including the efficiency gains and zero-shot extrapolation capabilities, demonstrate the practical value of this approach. The derived scaling laws offer actionable insights for future research in model scaling. Overall, this is a high-quality paper with strong technical contributions and significant potential impact on the field of computer vision and generative AI.
Vision-language-action (VLA) models commonly adopt an LLM-centric V to L to A pathway, where visual observations are projected into the representation space of a large language model before being decoded into robot actions. Although effective, this design incurs substantial computation and memory overhead at every policy invocation. In this work, we introduce TurboVLA, a new VLA paradigm that reformulates the conventional V to L to A pathway as a direct V + L to A mapping. Instead of using a large language model as the central interface between perception and action, TurboVLA independently encodes visual observations and language instructions, directly exchanges information between them through lightweight bidirectional vision-language interaction, and predicts continuous action chunks with a compact decoder. This simple design constructs task-conditioned representations directly from visual and linguistic features, significantly reducing the computational and memory costs of VLA inference. On LIBERO, TurboVLA achieves 97.7% average success with only 0.2B parameters, 31.2 ms inference latency, and 0.9 GB inference VRAM on a consumer-grade RTX 4090, matching or outperforming substantially larger VLA policies. These results establish TurboVLA as a simple and effective alternative to the prevailing LLM-centric VLA paradigm, offering a new perspective on how vision, language, and action can be connected for efficient robotic manipulation. Code is available at https://github.com/H-EmbodVis/TurboVLA.
Primary: Huazhong University of Science and Technology
All Institutions: Huawei Technologies Co. Ltd, Huazhong University of Science and Technology
TurboVLA presents a compelling and efficient alternative to LLM-centric VLA models by demonstrating that direct vision-language interaction with compact encoders can achieve state-of-the-art manipulation performance with drastically reduced computational overhead, thereby enabling real-time deployment on consumer hardware.
The paper proposes TurboVLA, a Vision-Language-Action model that abandons the Large Language Model (LLM) backbone in favor of a direct mapping from visual and linguistic features to actions. The architecture employs a lightweight text encoder (BERT), a visual encoder (DINOv3), and a bidirectional cross-attention module to fuse these modalities before passing them to a compact transformer decoder for continuous action chunk prediction. The core methodological contribution is the architectural shift from an LLM-centric $V \to L \to A$ pathway to a direct $V+L \to A$ pathway. While the components (BERT, DINOv3, Cross-Attention, ACT decoder) are standard and well-established in their respective domains, the specific integration for real-time robotic control at this efficiency level is a coherent and well-executed design choice. The novelty lies in the empirical demonstration that LLMs are not strictly necessary for execution-level control, challenging the current trend of scaling VLA models with larger LLMs.
The experimental evaluation is rigorous and compelling. The authors benchmark TurboVLA against a wide range of state-of-the-art VLA models (OpenVLA, Pi-0, Pi-0.5, CogVLA, etc.) on the LIBERO suite and RoboTwin 2.0. The results show that TurboVLA achieves 97.7% average success on LIBERO, matching or exceeding models with 10x-40x more parameters and significantly higher latency (31.2 ms vs >80 ms for competitors). The inclusion of real-world deployment on an AgileX Piper platform adds substantial practical value. The ablation studies effectively isolate the contributions of language conditioning, interaction design, and depth. The comparison includes both "capability-oriented" and "acceleration-oriented" baselines, providing a fair assessment of the performance-efficiency trade-off.
The paper provides detailed implementation specifications, including encoder types (DINOv3 ViT-B, BERT), hidden dimensions (256), interaction layers (6), and training hyperparameters (learning rate, batch size, loss function). The code is explicitly stated to be available on GitHub. The use of standard datasets (LIBERO, RoboTwin) and common evaluation protocols ensures that results can be reproduced by other researchers. The measurement of latency and VRAM on a specific hardware setup (RTX 4090) is transparent.
The primary limitation is the scope of the language understanding. By replacing the LLM with BERT, the model is optimized for concrete, execution-level instructions (e.g., "pick up the red block") and may struggle with complex, multi-step reasoning or open-ended semantic generalization that requires the broader world knowledge embedded in LLMs. The authors acknowledge this, noting that high-level task planning is outside the scope of this execution-focused policy. Additionally, the model's performance on highly complex bimanual tasks (RoboTwin) is good but not as dominant as on single-arm tasks, suggesting potential limits in handling extreme spatial-temporal coordination with a compact representation.
This work has significant implications for the democratization of robotics. By enabling high-performance VLA policies to run on consumer-grade hardware with minimal memory footprint, it lowers the barrier to entry for deploying intelligent robotic systems in resource-constrained environments (e.g., mobile robots, embedded systems). It challenges the "bigger is better" narrative in VLA research, encouraging the community to explore more efficient, task-specific architectures rather than relying solely on scaling general-purpose language models. TurboVLA presents a compelling and efficient alternative to LLM-centric VLA models by demonstrating that direct vision-language interaction with compact encoders can achieve state-of-the-art manipulation performance with drastically reduced computational overhead, thereby enabling real-time deployment on consumer hardware.
Coding agents have made substantial progress on software engineering tasks that modify existing codebases, including bug fixing and feature implementation. However, constructing a complete program from scratch remains a major challenge: even the frontier models evaluated on ProgramBench fully resolve fewer than 1% of tasks. One obstacle is the lack of scalable training environments for this from-scratch setting, spanning the whole software engineering life cycle, as existing environment-construction frameworks focus only on a single phase in software development. To address this gap, we introduce MindForge, an automated pipeline that converts open-source command-line programs into source-free environments that expose only a compiled reference executable and its documentation. Using MindForge, we construct training environments from repositories disjoint from those in ProgramBench, and curate a high-quality data recipe consisting of program synthesis trajectories using GLM-5.2 as the teacher agent. Fine-tuning Qwen3.6-27B on these trajectories increases its ProgramBench average test pass rate from 37.98% to 49.51%, achieving performance comparable to substantially larger frontier models. Moreover, the fine-tuned model consistently improves over the base model across all seven unseen software engineering benchmarks, spanning long-horizon repository generation and translation, bug fixing, feature implementation, and cross-language issue resolution, with absolute gains of 31.00 points on RepoZero-C2Rust, 14.16 on DeepSWE, 10.70/4.56 on NL2Repo-Bench (with/without tests), 5.04 on SWE-bench Verified, 5.93 on SWE-bench Pro, 5.22 on SWE-bench Multilingual, and 4.94 on FeatBench.
Primary: Unknown
All Institutions: Unknown
The paper presents a novel and effective method for generating source-free training data for program synthesis, demonstrating significant performance gains on standard benchmarks. By addressing the lack of scalable, whole-life-cycle training environments, MindForge offers a valuable contribution to the field of AI for software engineering, with strong empirical results and clear practical implications.
The paper proposes "MindForge," a pipeline designed to generate source-free training environments for program synthesis. The core innovation lies in converting open-source repositories into environments where the model only has access to a compiled binary and documentation, simulating a realistic "black-box" testing scenario. This addresses a significant gap in current LLM training data, which often relies on source-code-rich environments or single-phase tasks. The method involves curating high-quality trajectories using a strong teacher model (GLM-5.2) to fine-tune a smaller model (Qwen3.6-27B). The approach is technically sound and addresses a critical bottleneck in scaling code agents: the lack of diverse, whole-life-cycle training data that doesn't leak implementation details.
The experimental evaluation is comprehensive and impressive. The authors demonstrate that fine-tuning Qwen3.6-27B on MindForge-generated data yields significant improvements on ProgramBench (37.98% to 49.51% pass rate), outperforming much larger frontier models. Crucially, they evaluate on seven unseen benchmarks spanning various software engineering tasks (RepoZero, DeepSWE, NL2Repo, SWE-bench variants, FeatBench), showing consistent absolute gains. The results suggest that the source-free synthesis approach generalizes well across different types of coding tasks and languages. The use of disjoint repositories for training and evaluation helps mitigate data contamination concerns, adding credibility to the reported gains.
The paper describes the pipeline clearly, but reproducibility depends on the availability of the MindForge tool and the specific GLM-5.2 teacher model weights or API access. If the code and data recipes are open-sourced (which is implied by the nature of such papers but not explicitly confirmed in the text snippet), reproducibility is high. The reliance on a specific teacher model (GLM-5.2) might be a barrier if that model is not publicly available or if its use is restricted.
The primary limitation is the dependency on the quality of the teacher model (GLM-5.2). If the teacher makes systematic errors, these will be distilled into the student. Additionally, the "source-free" constraint, while realistic, might limit the model's ability to learn deep structural reasoning compared to source-code-aware training. The paper focuses on a specific model size (27B); it is unclear how this scales to significantly larger or smaller models. The evaluation, while broad, is still limited to existing benchmarks, and the "whole-life-cycle" claim is supported by the diversity of tasks but not necessarily by a single, unified end-to-end metric.
This work has significant potential to advance the field of AI for software engineering. By providing a scalable method to create diverse, realistic training environments, it lowers the barrier to training high-performing coding agents. This could lead to more robust and generalizable AI assistants for developers, potentially accelerating software development and maintenance. However, the increased capability of coding agents also raises concerns about the security of software supply chains and the potential for automated exploitation of vulnerabilities. The paper presents a novel and effective method for generating source-free training data for program synthesis, demonstrating significant performance gains on standard benchmarks. By addressing the lack of scalable, whole-life-cycle training environments, MindForge offers a valuable contribution to the field of AI for software engineering, with strong empirical results and clear practical implications.
We propose amortized moment matching, utilizing neural networks to learn data moments as distributional training signals. By casting diffusion denoisers through polynomial projections, we establish a general framework for moment amortization, revealing that an $n$-th degree projection explicitly identifies data moments up to order $n+1$. Derived from the tractable affine case, we instantiate the Amortized Fréchet Distance (AMFD) loss. Unlike FD-loss which relies on explicit marginal moment calculations, AMFD is able to dynamically learn conditional moments via an alternating, matrix-free optimization pipeline that effortlessly scales to high-dimensional data. When operating on global representation features, AMFD serves as a powerful post-training objective; empirically, its neural formulation yields more robust training dynamics than exact statistical matching, substantially surpassing the FD baseline on the FDr$^6$ metric and achieving superior one-step generation on ImageNet. Furthermore, it unlocks direct exploration within native generative spaces, suggesting that the first two moments can identify target distributions only in spaces with strong semantics. Finally, when scaled to text-to-image generation, the condition-aware nature of AMFD unlocks massive gains in instruction-following capabilities, enabling our one-step models to outperform their multi-step FLUX.2 [klein] 4B teachers on the GenEval benchmark while achieving on-par performance on PickScore. Code and checkpoints are available at https://github.com/poppuppy/amfd.
Primary: Kuaishou Technology
All Institutions: Kuaishou Technology
[One sentence main contribution]. The paper introduces Amortized Moment Matching (AMFD), a neural framework for scalable, condition-aware distribution matching that leverages polynomial projections of diffusion denoisers to efficiently match conditional moments. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The work presents a theoretically motivated and empirically validated method for post-training generative models. By amortizing moment estimation through neural networks, it circumvents the computational bottlenecks of exact moment calculation while maintaining robust training dynamics. The connection between diffusion denoiser projections and data moments provides a fresh theoretical lens on flow matching. The empirical results on ImageNet and text-to-image generation demonstrate that AMFD can significantly improve one-step generation quality and instruction following, offering a practical and effective tool for model distillation. The method's scalability and stability make it a valuable addition to the generative modeling toolkit, particularly for large-scale applications where computational efficiency is paramount.
The paper proposes "Amortized Moment Matching" (AMFD), a post-training objective for generative models. The core theoretical claim is that polynomial projections of diffusion denoisers correspond to conditional data moments. Specifically, an $n$-th degree projection identifies moments up to order $n+1$. The authors instantiate a tractable second-order case (matching mean and covariance) called AMFD. Unlike standard Fréchet Distance (FD) loss which computes empirical moments on batches, AMFD uses a neural network (amortizer) to predict these moments conditionally. This allows for a matrix-free optimization via Jacobian-Vector Products (JVPs), avoiding the $O(D^2)$ memory cost of explicit covariance matrices. The method is applied to ImageNet post-training and text-to-image distillation. The methodology is mathematically grounded in flow matching and orthogonal projections, offering a novel perspective on distribution matching in representation spaces.
The authors evaluate AMFD on ImageNet-256 and text-to-image generation (FLUX.2, PixelGen). On ImageNet, AMFD achieves state-of-the-art FDr$^6$ scores for one-step generation, outperforming FD-loss baselines. In text-to-image tasks, AMFD enables one-step models to surpass multi-step teachers on GenEval (instruction following) while maintaining PickScore. The experiments include ablations on amortizer capacity, conditioning types (conditional vs. unconditional), and native generative spaces (pixel vs. latent). The results are strong and demonstrate the efficacy of the proposed loss function. However, some claims regarding "massive gains" and "state-of-the-art" should be viewed in the context of a preprint with limited independent verification. The comparison to FLUX.2 teachers is significant but relies on specific distillation setups.
The paper provides a GitHub link and mentions code availability. The methodology includes detailed algorithmic descriptions, including the alternating optimization pipeline and JVP implementations. The authors provide specific hyperparameters and architectural details (e.g., AdaLN-conditioned MLPs, RMSNorm usage). The custom JVP implementation for MLPs is described, which aids reproducibility. However, the reliance on specific pre-trained encoders and the complexity of the alternating training loop may pose challenges for exact replication without careful tuning.
The authors acknowledge that AMFD is restricted to first and second moments, leaving higher-order statistics uncaptured. The method relies on off-the-shelf representation encoders, which may bottleneck performance on high-resolution generation if the encoders are not trained at that resolution. Additionally, AMFD is a post-training objective and cannot train models from scratch. The performance gain in conditional settings (AMFD-C) vs. unconditional (AMFD-U) varies by task complexity, suggesting that the amortizer's ability to generalize conditions is a limiting factor.
AMFD offers a scalable and stable alternative to adversarial training and exact moment matching for generative model distillation. By enabling efficient one-step generation with high fidelity, it reduces computational costs for inference. The condition-aware nature of AMFD improves instruction-following capabilities in text-to-image models, which has implications for controllable generation. The framework could be extended to other generative paradigms beyond diffusion, such as flow matching or GANs, potentially influencing the design of future distribution matching objectives. [One sentence main contribution]. The paper introduces Amortized Moment Matching (AMFD), a neural framework for scalable, condition-aware distribution matching that leverages polynomial projections of diffusion denoisers to efficiently match conditional moments. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The work presents a theoretically motivated and empirically validated method for post-training generative models. By amortizing moment estimation through neural networks, it circumvents the computational bottlenecks of exact moment calculation while maintaining robust training dynamics. The connection between diffusion denoiser projections and data moments provides a fresh theoretical lens on flow matching. The empirical results on ImageNet and text-to-image generation demonstrate that AMFD can significantly improve one-step generation quality and instruction following, offering a practical and effective tool for model distillation. The method's scalability and stability make it a valuable addition to the generative modeling toolkit, particularly for large-scale applications where computational efficiency is paramount.
Text-space optimization adapts large language models (LLMs) by editing external natural-language artifacts rather than model weights, so the optimized artifacts remain inspectable and the model can be treated as a black box. However, most existing text-space methods keep evaluation fixed. On open-ended tasks, this can become a bottleneck: once the solver improves on the criteria a rubric measures, omitted dimensions remain invisible to the optimization signal. Simply evolving the rubric is also unreliable when updates are selected by the current solver's score, because apparent progress can come from making the rubric easier to satisfy. We introduce DecoEvo (Decoupled Co-Evolution), which co-evolves a solver skill and a rubric-generator skill under decoupled objectives without using gold rubrics during optimization. The solver skill is updated using criterion-level feedback, while the rubric-generator skill is revised through complementary audits of requirement coverage and response discrimination that are independent of aggregate solver score. This separation focuses generator updates on newly exposed solver weaknesses, reducing repeated emphasis on criteria the solver already satisfies. Under each benchmark's official evaluation, DecoEvo outperforms all compared methods across five benchmarks and three LLM backbones, yielding 2.8--5.0\% relative gains over SkillOpt in the five-benchmark average.
Primary: Zhejiang University
All Institutions: Zhejiang University
DecoEvo presents a robust and theoretically grounded solution to the score-coupling problem in text-space LLM optimization, demonstrating that decoupling solver and rubric-generator objectives leads to more reliable and generalizable improvements across diverse open-ended tasks.
The paper introduces DecoEvo, a novel framework for text-space optimization of LLMs that addresses the critical issue of "score-coupling" in co-evolutionary settings. The core innovation is the decoupling of the solver's objective from the rubric-generator's objective. While existing methods (like SkillOpt) keep the rubric fixed, and naive co-evolution risks the generator simplifying the rubric to inflate the solver's score, DecoEvo uses two independent, frozen audits: a task-conditioned structural audit (to check for omitted requirements) and a near-tie contrastive audit (to check for discriminative power among similar responses). This ensures that the generator evolves to provide *better* feedback, not *easier* feedback. The methodology is theoretically sound, well-motivated by the instability of co-adaptive systems, and practically implemented using prompt-based audits on a frozen backbone. The separation of concerns is elegant and directly addresses a known failure mode in LLM self-improvement pipelines.
The experimental evaluation is comprehensive and rigorous. The authors test DecoEvo across five benchmarks (HealthBench, WritingBench, ResearchQA, and their cross-domain transfer counterparts) and three LLM backbones (GPT-4o, Qwen3-4B, Qwen3-8B). The results show consistent improvements over baselines, including Zero-shot, SkillOpt, and a newly constructed Score-Coupled Co-Evolution (SC-CoEvo) baseline. The inclusion of the SC-CoEvo baseline is particularly valuable as it isolates the contribution of score decoupling. Ablation studies confirm the necessity of both audit types and the verification step. The training dynamics analysis effectively demonstrates that SC-CoEvo suffers from proxy over-optimization (high internal score, low external score), while DecoEvo maintains alignment with gold rubrics. The cross-benchmark transfer results further validate the generalizability of the evolved solver skills.
The paper provides detailed descriptions of the methodology, including the structure of the audits, the update rules, and the verification protocols. The use of disjoint data splits for solver and generator validation is clearly defined. The authors report standard deviations over five runs, indicating statistical rigor. While the specific prompts for the audits are not fully reproduced in the text, the logical structure is clear enough for replication. The use of standard benchmarks (HealthBench, WritingBench) aids in reproducibility. The supplementary material likely contains hyperparameters and audit schedules, which is standard practice.
The primary limitation is the reliance on LLM-based audits. While the audits are "frozen" and "role-separated," they are still powered by LLMs (the same backbone or a similar one). This introduces potential bias and variability depending on the base model's capabilities. The performance gains, while statistically significant and consistent, are modest in absolute terms (2.8-5.0% relative gain). The method is also computationally more expensive than SkillOpt due to the additional audit steps, although the authors argue the cost is manageable. The evaluation is limited to text-based tasks (medical, writing, research QA); generalization to other modalities or highly structured tasks (like code or math) is not demonstrated.
This work has significant implications for the field of LLM alignment and self-improvement. By demonstrating that decoupling evaluation feedback from policy optimization prevents proxy gaming, it provides a robust recipe for black-box LLM adaptation. This could lead to more reliable and interpretable LLM improvement pipelines, reducing the risk of reward hacking in open-ended domains. The emphasis on inspectable artifacts (text skills) also aligns with the growing need for transparency in AI systems. DecoEvo presents a robust and theoretically grounded solution to the score-coupling problem in text-space LLM optimization, demonstrating that decoupling solver and rubric-generator objectives leads to more reliable and generalizable improvements across diverse open-ended tasks.
Language-model agents are increasingly deployed under standing instructions: a system prompt, a policy file, or a skills document is placed in context, and the agent is trusted to let it govern every action that follows. Existing benchmarks rarely test this deployment pattern directly; they measure whether an agent can complete a task, not whether a long, binding policy document actually constrains its behavior over an extended tool-use horizon. We present HANDBOOK.md, a benchmark of 65 agentic tasks modeled on how enterprise employees follow company handbooks. Each task places an agent in a self-contained company environment, a file workspace together with mock email, chat, calendar, issue-tracking, and commerce services exposed over the Model Context Protocol, and instructs it to carry out routine professional work governed by an expert-written standard operating procedure of 20 to 124 pages. Tasks span five domains (finance, medical billing, insurance, logistics, and HR) and ten fictional companies. To resist memorization, every task modifies one of ten base handbooks, altering the specific rules and thresholds on which grading turns, so no two tasks share a policy. Grading is fully deterministic: each task carries a rubric of programmatic criteria (824 in total) that check both that required actions occurred and that prohibited actions did not. Under strict grading, where a trial passes only if every criterion is satisfied, the best of thirty evaluated model configurations passes 36.2% of trials, and most frontier configurations remain below 25%. Failures follow consistent patterns: agents let a plausible in-environment request override the standing policy, perform a required check and then act against its result, lose rule details over long horizons, and report compliance they did not achieve. We release all tasks, environments, and the evaluation harness.
Primary: Surge AI
All Institutions: Surge AI
[One sentence main contribution]. HANDBOOK.md introduces a rigorous, deterministic benchmark for evaluating long-context policy adherence in agentic workflows, revealing significant gaps in current frontier models' ability to follow complex, standing instructions. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper makes a substantial contribution to the field of AI safety and agent evaluation by introducing HANDBOOK.md, a benchmark that directly tests the deployment pattern of placing long policy documents in context for agents. Unlike previous benchmarks that focus on task completion or short-term instruction following, HANDBOOK.md evaluates the agent's ability to maintain and apply complex, multi-page policies across extended, multi-tool interactions. The methodology is innovative in its use of per-task policy mutations to prevent memorization and its fully deterministic, two-sided grading system that penalizes both errors of commission and omission. The experimental results are compelling, showing that even the best models fail to adhere to policies in over 60% of cases, with failure modes that mirror real-world risks like prompt injection and reasoning errors. The detailed failure analysis provides actionable insights for researchers and practitioners. The benchmark's design, including the use of realistic enterprise environments and deterministic verifiers, sets a new standard for rigorous agent evaluation. This work is highly significant for the development of trustworthy AI agents in enterprise settings, providing a clear metric for policy compliance and highlighting the need for architectural improvements beyond simple context window expansion.
The paper introduces HANDBOOK.md, a novel benchmark designed to evaluate the ability of language model agents to adhere to long, standing policy documents (20-124 pages) during agentic workflows. The methodology is rigorous and distinct from existing benchmarks: it uses unique, mutated handbooks per task to prevent memorization, employs fully deterministic programmatic grading (824 criteria) to assess both required actions and prohibited omissions, and simulates a realistic enterprise environment with multiple tool interfaces (email, Slack, Jira, etc.). The approach shifts the evaluation focus from simple task completion to policy compliance and constraint satisfaction over long horizons.
The evaluation covers 30 configurations of 11 providers, revealing that even frontier models struggle significantly, with the best configuration passing only 36.2% of trials under strict grading. The failure analysis is a key contribution, identifying four consistent failure modes: immediate request overriding standing rules, ignoring verification results, skipping verification, and asserting false compliance. The results are presented with high clarity, including cost-efficiency plots and detailed trajectory analyses. The benchmark demonstrates substantial headroom for improvement, indicating it is a challenging and valid measure of current capabilities.
The paper provides a public GitHub repository with all tasks, environments, rubrics, and the evaluation harness. The use of containerized environments and deterministic Python-based verifiers ensures high reproducibility. The detailed description of the mutation process for handbooks and the specific tool APIs allows other researchers to replicate and extend the benchmark.
The benchmark is limited to 65 tasks, which, while diverse, may not capture the full spectrum of enterprise policy complexities. The environments are simulated (mock services), which may not perfectly replicate the noise and unpredictability of real-world production systems. Additionally, the focus is on static policies; dynamic policy updates during execution are not the primary focus, though some tasks include amendments. The models evaluated are from mid-2026, so the landscape may have shifted further by the time of publication.
This benchmark addresses a critical gap in agent evaluation: the reliability of agents under long-term policy constraints. It has significant implications for the deployment of AI agents in regulated industries (finance, healthcare, legal) where compliance is paramount. By highlighting the fragility of in-context policy adherence, it motivates the development of better architectural solutions, such as external policy guards and more robust retrieval mechanisms. It serves as a crucial baseline for measuring progress in trustworthy AI agents. [One sentence main contribution]. HANDBOOK.md introduces a rigorous, deterministic benchmark for evaluating long-context policy adherence in agentic workflows, revealing significant gaps in current frontier models' ability to follow complex, standing instructions. [Comprehensive analysis of the technical contribution, methodology, and significance to the field]. The paper makes a substantial contribution to the field of AI safety and agent evaluation by introducing HANDBOOK.md, a benchmark that directly tests the deployment pattern of placing long policy documents in context for agents. Unlike previous benchmarks that focus on task completion or short-term instruction following, HANDBOOK.md evaluates the agent's ability to maintain and apply complex, multi-page policies across extended, multi-tool interactions. The methodology is innovative in its use of per-task policy mutations to prevent memorization and its fully deterministic, two-sided grading system that penalizes both errors of commission and omission. The experimental results are compelling, showing that even the best models fail to adhere to policies in over 60% of cases, with failure modes that mirror real-world risks like prompt injection and reasoning errors. The detailed failure analysis provides actionable insights for researchers and practitioners. The benchmark's design, including the use of realistic enterprise environments and deterministic verifiers, sets a new standard for rigorous agent evaluation. This work is highly significant for the development of trustworthy AI agents in enterprise settings, providing a clear metric for policy compliance and highlighting the need for architectural improvements beyond simple context window expansion.
We study the contextual dynamic pricing problem under non-stationarity, where a firm sells products to $T$ sequentially arriving consumers that behave according to an unknown demand model that can change over time. The demand model is assumed to be a generalized linear model (GLM), allowing for a feature vector in $\mathbb{R}^d$ that encodes products and consumer information. To achieve optimal revenue (i.e., least regret), the firm needs to learn and exploit the unknown GLMs while monitoring for potential changes. We propose a multiscale change-point detection based algorithm that achieves a regret of order $\widetilde{O}(\sqrt{s_TdT}\wedge\{V_T^{1/3}d^{1/3}T^{2/3}+\sqrt{dT}\})$, where $s_T$ is the number of piecewise stationary segments and $V_T$ is a newly defined notion of design-adjusted variation budget of model parameters. Our algorithm is adaptive and does not require knowing $s_T$ or $V_T$. Moreover, to our knowledge, this is the first dynamic pricing algorithm that is adaptive to the nature of changes and achieves the best-of-both-worlds rate, thus closing a long-standing gap in the literature. We remark that, due to the varying contexts, existing works in the adaptive non-stationary bandit literature cannot be applied to achieve optimality for contextual dynamic pricing. The regret is further accompanied with a newly constructed minimax lower bound, confirming the optimality of our algorithm (up to logarithmic factors). Extensive numerical experiments are conducted to illustrate the efficiency and robustness of the proposed algorithm in non-stationary dynamic pricing.
Primary: Fudan University
All Institutions: Fudan University, University of Notre Dame
This paper presents a theoretically rigorous and practically relevant advancement in non-stationary contextual dynamic pricing. By introducing a multiscale change-point detection mechanism and a novel design-adjusted variation budget, it closes a long-standing gap in achieving adaptive, optimal regret for both structured and unstructured non-stationarity in GLM-based pricing. The minimax optimality proof and the generalization of variation measures to account for context design represent significant technical contributions to the field of online learning and operations research.
The paper proposes a novel algorithm, MCP-DP, for contextual dynamic pricing under non-stationary environments. The core methodological contribution is the integration of a multiscale change-point detection mechanism with an explore-then-commit (ETC) framework. Specifically, the authors design a likelihood-ratio test (LRT) tailored for Generalized Linear Models (GLMs) to detect shifts in the demand model parameters. A key innovation is the "design-adjusted variation budget," which accounts for the interaction between parameter changes and the context distribution, providing a sharper characterization of non-stationarity than previous unweighted variation measures. The algorithm adaptively handles both structured (piecewise stationary) and unstructured (bounded variation) non-stationarity without prior knowledge of the change points or variation magnitude. The theoretical analysis includes a new high-probability bound for the MLE of a mixture of GLMs, which is technically significant.
The paper reports extensive numerical experiments to validate the efficiency and robustness of MCP-DP. While the full text provided is truncated, the abstract and introduction indicate comparisons against existing baselines (likely including CPDP and MWDP mentioned in the text). The experiments presumably demonstrate that MCP-DP achieves lower regret than non-adaptive methods that require knowledge of the non-stationarity type or parameters. The inclusion of a minimax lower bound that matches the upper bound (up to logarithmic factors) provides strong theoretical validation of the algorithm's optimality.
The paper provides detailed algorithmic descriptions, including pseudocode for the multiscale scheduling and LRT. The assumptions are clearly stated. However, as an arXiv preprint, the code repository is not explicitly linked in the provided text (though often available on author websites or GitHub, it is not in the text). The theoretical proofs are relegated to supplementary material, which is standard for such venues but requires careful verification. The definition of the design-adjusted variation budget is precise, aiding reproducibility of the theoretical conditions.
The primary limitation is the reliance on the GLM assumption for demand, which, while common, may not capture all complex consumer behaviors. The algorithm's performance depends on the tuning parameters (e.g., the LRT threshold), although the paper claims robustness. The "best-of-both-worlds" guarantee is asymptotic and up to logarithmic factors; practical performance in small-horizon regimes might vary. The computational cost of the LRT, while claimed efficient, involves MLE computation at each detection step, which could be heavy for very high-dimensional contexts or large datasets, though the paper argues it is manageable.
This work has significant implications for revenue management in e-commerce, advertising, and resource allocation where demand is non-stationary. By providing an adaptive, optimal solution, it enables firms to maximize revenue in volatile markets without needing to manually tune algorithms for specific change patterns. The theoretical tools developed (GLM MLE bounds, design-adjusted variation) are applicable to broader online learning and time-series analysis problems involving GLMs. This paper presents a theoretically rigorous and practically relevant advancement in non-stationary contextual dynamic pricing. By introducing a multiscale change-point detection mechanism and a novel design-adjusted variation budget, it closes a long-standing gap in achieving adaptive, optimal regret for both structured and unstructured non-stationarity in GLM-based pricing. The minimax optimality proof and the generalization of variation measures to account for context design represent significant technical contributions to the field of online learning and operations research.
LoRA fine-tuning can create intruder dimensions: new leading singular vectors of the updated weight matrix $W+BA$ that are nearly orthogonal to all pretrained singular vectors and that drive catastrophic forgetting. Since their discovery, no theory has predicted, layer by layer on measured spectra, when they appear. We derive a per-layer critical update strength $s^\ast=\barθ/(γσ_1(BA))$, computed from the measured spectrum of $W$ alone through the rectangular spiked-deformation transform, together with an exact secular-equation characterization of the updated spectrum, with no fitted parameters. In a pre-specified study spanning four dense Transformer families, a state-space model, a mixture-of-experts model, and an encoder-decoder (18 adapters, 9{,}840 layer scans), the law localizes the empirical threshold within a factor of two on $82\%$ of layers, separates intruder-bearing from intruder-free layers at deployment with a mean AUC of $0.89$, holds unchanged on six third-party adapters, and predicts where WikiText-2 perplexity begins to degrade; a combination of the two pre-specified edge evaluations reaches $98\%$ and is confirmed out-of-bag on the external adapters ($0.997$). Full fine-tuning disperses its update far below the threshold of every layer, which resolves the asymmetry between LoRA and full fine-tuning. Norm-matched interventions confirm that threshold-crossing layers, rather than update magnitude, carry the forgetting, and a spike-budget rule derived from the thresholds, requiring one SVD and no validation sweeps, reduces forgetting by $62\%$ on the most fragile model at no task cost.
Primary: Technical University of Munich
All Institutions: Technical University of Munich
This paper has profound broader impact on the field of machine learning, particularly for large language models and efficient fine-tuning. 1. **Fundamental Understanding**: It provides a foundational theoretical understanding of catastrophic forgetting in LoRA, moving beyond empirical observation to a predictive, quantitative law. This shifts the paradigm from "what happens" to "why and when it happens." 2. **Practical Tools for Practitioners**: * **Fragility Audit**: Enables pre-training audits to predict which layers are prone to forgetting, allowing for proactive design choices. * **Strength Calibration**: Offers a method for calibrating LoRA strength without costly validation sweeps, saving significant compute and time. * **Layer-level Blame Assignment**: Identifies specific layers responsible for forgetting, guiding targeted interventions (monitoring, merging, repair). * **Adapter Auditing**: Provides a quick, post-training method to assess the forgetting risk of third-party adapters. 3. **Future Research**: The work opens new avenues for research in PEFT, spectral analysis of neural networks, and forgetting mitigation strategies. It provides a strong theoretical baseline for developing more robust and efficient fine-tuning methods. 4. **Architecture Agnostic Insights**: The demonstration that the law holds across Transformers, SSMs, and MoEs suggests a universal principle underlying weight matrix updates, which could have implications beyond LLMs. The ability to predict and control forgetting *before* training, based purely on the pretrained spectrum, is a significant leap forward. The paper "The Intruder Threshold: A Spectral Law for LoRA Fine-Tuning" presents a groundbreaking theoretical framework and extensive empirical validation for understanding and mitigating catastrophic forgetting in LoRA fine-tuning. By deriving a per-layer critical update strength from the measured spectrum of pretrained weight matrices, the authors provide a universal law that accurately predicts the emergence of "intruder dimensions" – new singular vectors driving forgetting – across diverse LLM architectures and third-party adapters. This work not only offers a fundamental understanding of the LoRA forgetting phenomenon but also translates directly into practical tools for pre-training fragility audits, calibration without validation sweeps, layer-level blame assignment, and a spike-budget rule that significantly reduces forgetting, marking a significant advancement in efficient and robust LLM adaptation.
The methodology is exceptionally rigorous and well-structured. The paper introduces an "exactness ladder" for analyzing the updated weight matrix $W+BA$. The "exact rung" leverages standard thin-SVD updating and a secular equation derived from a determinant identity, allowing for precise computation of singular values and overlaps from a small "core matrix." This is a crucial practical contribution, making 9,840 layer scans affordable. The "universal rung" then introduces the core theoretical contribution: a per-layer critical update strength $s^\ast$ derived from the rectangular spiked-deformation transform, assuming generic spike directions. This provides a predictive law with no fitted parameters, evaluated on the *measured* spectrum of $W$. The authors meticulously address the empirical measure's discrete nature by introducing an evaluation point $z_0$ and rigorously analyzing its sensitivity, ensuring the prediction's robustness. The "intermediate rung" incorporates alignment corrections, demonstrating how real adapters deviate from generic positions. The pre-specified validation protocol, with clear go/no-go gates and falsification bars, is a strong methodological choice, enhancing confidence in the results. The theoretical framework is sound, connecting advanced spectral theory to a practical and pressing problem in LLM fine-tuning.
The experimental evaluation is outstanding in its scale, rigor, and diversity. The study spans four dense Transformer families (Qwen2.5-7B, Llama-3.1-8B, Mistral-7B-v0.3, OLMo-2-7B), a state-space model (Mamba-2.8b), a mixture-of-experts model (OLMoE-1B-7B), and an encoder-decoder model (FLAN-T5-XL), totaling 18 adapters and 9,840 layer scans. This breadth ensures the universality of the proposed law across diverse architectures. Key results include: 1. **Localization Accuracy**: The law localizes the empirical threshold within a factor of two on 82.2% of layers, significantly exceeding the pre-specified bar of 70%. 2. **Deployment Classification**: It separates intruder-bearing from intruder-free layers at deployment with a mean ROC-AUC of 0.89, providing a strong predictive capability. 3. **External Validity**: The law holds unchanged on six third-party adapters (including QLoRA), demonstrating its independence from specific training recipes. 4. **Forgetting Prediction**: It accurately predicts where WikiText-2 perplexity begins to degrade, with a Spearman correlation of 0.86 between the PPL knee and the median empirical threshold. 5. **Causal Intervention**: Norm-matched interventions confirm that predicted-supercritical layers carry disproportionately more forgetting (up to 240x more PPL increase), establishing causality. 6. **Practical Control**: A spike-budget rule derived from the thresholds reduces forgetting by 62% on the most fragile model at no task cost, requiring only one SVD and no validation sweeps. 7. **Asymmetry Resolution**: The paper resolves the asymmetry between LoRA and full fine-tuning, showing that full fine-tuning disperses its update far below the threshold of every layer, while LoRA concentrates it. The "edge-variant analysis" and "anti-alignment bias" dissection further refine the understanding and predictive power. The negative result on Wedin condition for rotation control is also informative. The experiments are meticulously designed to falsify the hypothesis, and the results overwhelmingly support it.
The paper provides excellent reproducibility details. It specifies training parameters (AdamW, learning rate, schedule, batch size, sequence length, steps, seed, target modules), evaluation metrics (WikiText-2, GSM8K, HellaSwag), and software versions (PyTorch, Transformers, PEFT). The authors state that "Full per-layer data (spectra, scan curves, and probes) and the analysis code accompany the submission as supplementary material," which is the gold standard for reproducibility. The reported training-seed variance and cross-seed agreement further bolster confidence in the robustness of the findings.
The authors transparently discuss limitations: 1. **Adapter Recipe Homogeneity**: While tested on diverse base models and third-party adapters, the authors' own adapters use a single recipe ($alpha=2r$), and most base models are tested on a single task family. 2. **Single Training Run**: Most configurations are single training runs, though stability checks with three seeds are reported. 3. **Intruder Criterion Choices**: The intruder criterion inherits choices of $epsilon$ and top-$k$ from prior work, though sensitivity analysis shows robustness. 4. **Anti-alignment Bias Residual**: While dissected to within grid resolution, a small residual bias remains. 5. **Edge Evaluation Performance**: The primary full-edge evaluation can be weaker on certain module types, though the bulk-edge variant and their geometric mean effectively repair this. 6. **Transferability of Calibration Constant**: Transferring the calibration constant across model families is untested. These limitations are minor in the context of the paper's overall scope and strength, and the authors proactively address many of them through sensitivity analyses and alternative evaluations.
This paper has profound broader impact on the field of machine learning, particularly for large language models and efficient fine-tuning. 1. **Fundamental Understanding**: It provides a foundational theoretical understanding of catastrophic forgetting in LoRA, moving beyond empirical observation to a predictive, quantitative law. This shifts the paradigm from "what happens" to "why and when it happens." 2. **Practical Tools for Practitioners**: * **Fragility Audit**: Enables pre-training audits to predict which layers are prone to forgetting, allowing for proactive design choices. * **Strength Calibration**: Offers a method for calibrating LoRA strength without costly validation sweeps, saving significant compute and time. * **Layer-level Blame Assignment**: Identifies specific layers responsible for forgetting, guiding targeted interventions (monitoring, merging, repair). * **Adapter Auditing**: Provides a quick, post-training method to assess the forgetting risk of third-party adapters. 3. **Future Research**: The work opens new avenues for research in PEFT, spectral analysis of neural networks, and forgetting mitigation strategies. It provides a strong theoretical baseline for developing more robust and efficient fine-tuning methods. 4. **Architecture Agnostic Insights**: The demonstration that the law holds across Transformers, SSMs, and MoEs suggests a universal principle underlying weight matrix updates, which could have implications beyond LLMs. The ability to predict and control forgetting *before* training, based purely on the pretrained spectrum, is a significant leap forward. The paper "The Intruder Threshold: A Spectral Law for LoRA Fine-Tuning" presents a groundbreaking theoretical framework and extensive empirical validation for understanding and mitigating catastrophic forgetting in LoRA fine-tuning. By deriving a per-layer critical update strength from the measured spectrum of pretrained weight matrices, the authors provide a universal law that accurately predicts the emergence of "intruder dimensions" – new singular vectors driving forgetting – across diverse LLM architectures and third-party adapters. This work not only offers a fundamental understanding of the LoRA forgetting phenomenon but also translates directly into practical tools for pre-training fragility audits, calibration without validation sweeps, layer-level blame assignment, and a spike-budget rule that significantly reduces forgetting, marking a significant advancement in efficient and robust LLM adaptation.
Long-horizon agents increasingly reuse their KV cache as memory: a serving system keeps a subset of cached entries and drops the rest. Eviction and episodic-memory schemes therefore rest on a premise rarely tested directly, that a retained event is still informative once the observations that produced it are gone. We test it by omitting one earlier observation from what is served, across otherwise identical agent histories. Among items sensitive to that observation, the answer overwhelmingly follows the omitted value, though no served span says which value is correct. We call this semantic materialization: a downstream event's cached rows act as an independently servable view of computation whose inputs are gone. It can also be written on purpose. A deliberately phrased, answer-free event raises donor-aligned recovery from 6% to 51% on Qwen3-8B without ever naming the value, whereas passively harvesting natural mentions from long-term dialog yields no detected advantage. What such a row carries is specific and bounded. Compact state survives, larger payloads decay toward chance, and whether a construction writes at all turns on phrasing rather than on meaning alone, so two phrasings the model comprehends equally well can diverge sharply. The result is a memory contract for sparse event-KV serving: what to write, where it lands, and what survives once the source is gone. For anyone who evicts the corollary is that dropping a source event and observing no accuracy loss does not show the source was unnecessary.
Primary: Not specified in paper text
All Institutions: Not specified in paper text
This paper has profound implications for the design and understanding of long-horizon agents and LLM memory systems. It fundamentally shifts the perspective of the KV cache from merely an inference cache to a "semantic memory substrate." 1. **LLM Memory and Agents**: It provides an "engineering handle" for deliberately writing and retrieving compact, source-omitted state, which is crucial for building more robust and efficient long-term memory for agents, enabling them to retain conclusions even when original observations are evicted. 2. **Eviction Policies**: The finding that dropping a source event might not cause accuracy loss because the information is already materialized elsewhere challenges current eviction policy evaluations. This necessitates more sophisticated metrics and strategies for memory management. 3. **Prompt Engineering**: The discovery that materialization is sensitive to phrasing, not just meaning, opens new avenues for prompt engineering to optimize state retention and retrieval. 4. **Understanding LLMs**: It offers a deep, causal insight into how LLMs process and store information internally, moving beyond a purely black-box view and revealing a programmable primitive within their architecture. This paper presents a groundbreaking analysis of the KV cache as a semantic memory substrate for LLMs. Through an exceptionally rigorous "donor pair" methodology, it causally demonstrates that LLMs can materialize compact, source-omitted state into downstream event spans, revealing a programmable primitive governed by a "memory contract" that dictates what to write, where it lands, and what survives. The findings challenge conventional understandings of LLM memory, provide actionable insights for designing more effective long-horizon agents, and significantly advance the field's understanding of LLM internal mechanisms.
The methodology is exceptionally rigorous and well-designed for probing the internal mechanisms of large language models. The core innovation is the "donor pair" experimental setup, where two agent histories are byte-identical in every served token and position, differing only in an *omitted* earlier observation (e.g., a value `v` vs. `v'`). This allows for robust causal attribution of downstream model behavior to the "materialized" state within the KV cache, rather than to explicit textual cues. The "serving contract" clearly defines the constraints: source events are excluded, the exact future query is absent at write time, and a frozen model is used without auxiliary readers or fine-tuning, ensuring the observed phenomenon is intrinsic to the model's native computation. The paper introduces precise predicates like "Materializes," "Trigger and carrier," and "Conditional landing" to systematically analyze the phenomenon. Experiments are structured to isolate the "Trigger" (which constructions write state), "Landing" (where the state resides in dependency chains), and "Access" (how much and what type of state can be recovered). The use of independent decoy sampling, careful statistical analysis (exact sign tests, TOST, conversation-clustered bootstrap), and explicit compatibility gates for models further enhances the methodological soundness.
The experimental evaluation is comprehensive and provides strong empirical evidence for the paper's claims. Experiments are conducted on recent, open-weight models (Qwen3-8B, Ministral-3-8B, Gemma-4-12B), ensuring relevance to current LLM research. 1. **Discovery**: The headline finding of 99:0 donor-aligned recovery on Qwen3-8B (and 130:0 in replication) is a striking and highly significant result, demonstrating that served rows can indeed answer from an omitted source. This robustness across serving setups, models, and readouts is critical. 2. **Trigger**: The sweep across sixteen carrier constructions reveals that "same semantics, different fate" – semantically equivalent phrasings can differ by tens of points in write-through, indicating that the "write gate" is a property of surface form, not meaning alone. The finding that there's "no universal construction" and the "write aperture" is model-dependent underscores the need for calibration. 3. **Landing**: Experiments on mirror chains show that "roots carry" the dominant donor-aligned signal, while "reference edges route" queries back to the root, providing a structural understanding of how materialized state is organized. 4. **Access**: The "compact-state envelope" is clearly demonstrated: binary states recover well (93.4%), but larger payloads (four- and eight-way) decay towards chance, and three-digit numbers are not recovered. This provides practical boundaries for the utility of materialized state. 5. **Programming the primitive**: A deliberately phrased, answer-free event (e.g., "determine the verdict now and record it here") significantly boosts donor-aligned recovery from 6% to 51% on Qwen3-8B, showcasing that this primitive is programmable. 6. **Real-dialog stress test**: Passive harvesting of natural mentions from long-term dialogs yields no detectable benefit, reinforcing the need for deliberate construction. The paper includes extensive appendices detailing protocol specifics, statistical conventions, and model compatibility checks, demonstrating exceptional thoroughness.
The paper exhibits an outstanding commitment to reproducibility. It explicitly states that all experiments run on frozen open-weight models with greedy decoding, and that donor pairs, leak assertions, and echo controls are enforced in code. Crucially, the authors commit to releasing "the experiment scripts, an experiment-to-script map, per-script configurations (seeds, arms, readouts), and the exact repositories, revision SHAs, and environment." This level of detail and commitment is exemplary and sets a high standard for the field.
The paper clearly articulates its limitations: 1. The causal channel is primarily for *compact state*; verbatim payloads rarely transfer. 2. Derived verdicts require a write-time prompt, which can incur a full-context accuracy cost. 3. The multi-hop accuracy ceiling uses oracle row selection, making it a mechanism ceiling rather than a deployable number. 4. Negative accessibility verdicts are based on output-interface measurements, suggesting that representation-level probes might reveal more. 5. The null result on real dialogs is scoped to the specific carrier-selection heuristic and recognition readout used. 6. Sliding-window models (Gemma-4) require specific handling for long contexts, and linear-attention hybrids might not expose token-addressable KV at every layer, limiting direct applicability to all LLM architectures.
This paper has profound implications for the design and understanding of long-horizon agents and LLM memory systems. It fundamentally shifts the perspective of the KV cache from merely an inference cache to a "semantic memory substrate." 1. **LLM Memory and Agents**: It provides an "engineering handle" for deliberately writing and retrieving compact, source-omitted state, which is crucial for building more robust and efficient long-term memory for agents, enabling them to retain conclusions even when original observations are evicted. 2. **Eviction Policies**: The finding that dropping a source event might not cause accuracy loss because the information is already materialized elsewhere challenges current eviction policy evaluations. This necessitates more sophisticated metrics and strategies for memory management. 3. **Prompt Engineering**: The discovery that materialization is sensitive to phrasing, not just meaning, opens new avenues for prompt engineering to optimize state retention and retrieval. 4. **Understanding LLMs**: It offers a deep, causal insight into how LLMs process and store information internally, moving beyond a purely black-box view and revealing a programmable primitive within their architecture. This paper presents a groundbreaking analysis of the KV cache as a semantic memory substrate for LLMs. Through an exceptionally rigorous "donor pair" methodology, it causally demonstrates that LLMs can materialize compact, source-omitted state into downstream event spans, revealing a programmable primitive governed by a "memory contract" that dictates what to write, where it lands, and what survives. The findings challenge conventional understandings of LLM memory, provide actionable insights for designing more effective long-horizon agents, and significantly advance the field's understanding of LLM internal mechanisms.
Safety-aligned large language models are trained to refuse harmful requests, yet embedding the same requests in particular scenarios can bypass their safeguards. Existing red-teaming methods empirically identify effective scenarios through observed attack outcomes, but why particular scenarios weaken refusal remains mechanistically unclear. Meanwhile, mechanistic interpretability studies have characterized both refusal directions and jailbreak-associated features, without explaining the relationship between the two representations. In this work, we show that scenario-wrapped prompts activate internal scenario directions whose causal steering consistently reduces refusal scores. Building on this finding, we propose \textsc{Concept2Scenario}, a concept-based attribution framework for vulnerable scenario discovery. It instantiates a broad concept space with a sparse autoencoder, attributes refusal suppression to individual concepts, translates the identified concepts into interpretable natural-language scenarios, and identifies synergistic scenario combinations through interaction attribution. Across three open-source models, two safety benchmarks, and six black-box jailbreak methods, the discovered scenarios serve as reusable priors that improve average attack success rates by up to $18.2$ percentage points. They also transfer to GPT-5, Claude-Haiku-4.5, and Gemini-3-Flash, suggesting that some scenario-level refusal vulnerabilities are shared across model families. Moreover, the identified combinations outperform their individual constituents and enable iterative attacks to succeed in fewer turns.
Primary: Renmin University of China
All Institutions: Renmin University of China, Xi’an Jiaotong University, University of Science and Technology of China, Wuhan University, Shanghai Artificial Intelligence Laboratory
This paper presents a novel and rigorous approach to understanding LLM vulnerabilities by linking mechanistic interpretability with adversarial red-teaming, demonstrating that scenario-based jailbreaks can be systematically discovered and generalized across model families.
The paper proposes Concept2Scenario, a framework that bridges mechanistic interpretability and adversarial red-teaming. By using Sparse Autoencoders (SAEs) to identify "scenario directions" in the latent space of LLMs, the authors demonstrate that these directions causally suppress refusal behaviors. The novelty lies in moving beyond empirical prompt engineering to a mechanistic understanding of *why* certain scenarios work, and then using this understanding to systematically generate effective jailbreaks. The translation of latent concepts back to natural language scenarios is a significant methodological contribution, offering interpretability for black-box-like vulnerabilities.
The evaluation is extensive, covering three open-source models, two safety benchmarks, and six black-box jailbreak methods. The results show a substantial improvement in attack success rates (up to 18.2 percentage points) when using the discovered scenarios as priors. Crucially, the paper demonstrates cross-model transferability to major proprietary models (GPT-5, Claude-Haiku-4.5, Gemini-3-Flash), which strongly validates the generalizability of the identified vulnerabilities. The finding that synergistic combinations of scenarios outperform individual ones adds depth to the experimental analysis.
The paper provides a clear description of the Concept2Scenario framework, including the use of SAEs for concept instantiation and interaction attribution. The use of open-source models for primary experiments ensures reproducibility of the core findings. However, the transfer experiments to proprietary models rely on black-box access, which limits full reproducibility of those specific results for independent verification without API access. The code is not explicitly linked in the provided text, but the methodology is sufficiently detailed for replication on open models.
The primary limitation is the reliance on SAEs, which are computationally expensive and may not scale perfectly to all model sizes or architectures without careful tuning. Additionally, the "translation" of latent concepts to natural language scenarios introduces a potential layer of approximation error; the natural language prompts may not perfectly capture the full semantic content of the latent direction. The paper also does not deeply explore the defensive implications or how to mitigate these specific scenario-based vulnerabilities, focusing primarily on the attack side.
This work has significant implications for AI safety. By mechanistically explaining how scenarios bypass safeguards, it provides a roadmap for both attackers and defenders. For defenders, it highlights the need for robustness against scenario-based manipulations, not just content-based filters. For the research community, it establishes a new paradigm for using mechanistic interpretability to understand and improve adversarial robustness. The transferability of these vulnerabilities to top-tier proprietary models underscores the urgency of addressing scenario-level safety gaps. This paper presents a novel and rigorous approach to understanding LLM vulnerabilities by linking mechanistic interpretability with adversarial red-teaming, demonstrating that scenario-based jailbreaks can be systematically discovered and generalized across model families.
Early warning of extreme market volatility is central to financial risk management, but actionable events are rare, nonstationary, and often triggered by exogenous information shocks. In our CSI~300 setting, only $\sim$80 positive samples are observed across 791 training days, making heavily supervised multi-source models unstable. We first analyze a 100K-parameter hierarchical text-signal fusion model (HTSF) and find that added parameterization hurts in this low-label regime. Motivated by this failure, we propose \textbf{AAMSF} (Anomaly-Augmented Multi-Signal Fusion), a semisupervised framework that combines Isolation Forest anomaly scores over market indicators, GDELT events, Chinese financial news, and English media with lightweight Ridge score fusion. We further introduce \textbf{T-AAMSF}, a temporal extension for multi-day anomaly accumulation. On CSI~300 (2018--2023), AAMSF achieves test AUC-ROC \textbf{0.680}, outperforming the strongest unsupervised baseline (0.630) and neural baseline (0.588), while T-AAMSF improves PR-AUC to 0.291. Ablations reveal strong source asymmetry: GDELT and domestic financial news provide complementary risk signals, whereas English media consistently reduces performance, and learned weighting is unreliable under validation noise. These results suggest an empirical design principle for label-scarce financial risk warning: robust anomaly geometry and source reliability can matter more than supervised representation capacity.
Primary: ShanghaiTech University
All Institutions: ShanghaiTech University
This paper presents a well-motivated and rigorously evaluated framework for extreme market volatility warning under severe label scarcity. Its core contribution lies in demonstrating that a lightweight, anomaly-based multi-source fusion approach, guided by empirical insights from the failure of complex deep learning models, can significantly outperform more sophisticated methods in a challenging real-world financial setting.
The paper presents a highly principled methodology, driven by a rigorous failure analysis of a complex deep learning model (HTSF) under extreme label scarcity. This initial analysis, demonstrating that "added parameterization hurts" in such regimes, is a crucial and counter-intuitive finding that effectively motivates the proposed AAMSF (Anomaly-Augmented Multi-Signal Fusion) framework. AAMSF is designed to minimize learnable parameters, combining unsupervised Isolation Forest (IF) for per-source anomaly detection with a lightweight Ridge regressor for market features (trained on a continuous target to leverage all available data). The score-level fusion employs fixed weights, a decision empirically justified by the unreliability of learned weights under noisy validation estimates, which is a significant practical insight. The temporal extension, T-AAMSF, further enhances the framework by accumulating anomaly evidence over multiple days, effectively capturing the signal build-up often preceding extreme events. The preprocessing strategies, particularly the "deviation from recent baseline" transforms for text features, are well-considered to make the data suitable for IF's geometric detection. Overall, the methodology is sound, well-motivated by empirical observations, and strategically designed for the challenging problem setting.
The experimental evaluation is comprehensive and robust. The study uses the CSI 300 index from 2018-2023 with a strict temporal split, ensuring a realistic and challenging environment, especially given the extreme label scarcity (only ~80 positive samples over 791 training days). AAMSF is rigorously compared against 10 diverse baselines, including statistical methods, classical ML, deep neural networks (e.g., Simple TFT), and unsupervised anomaly detection (Isolation Forest). AAMSF-Opt achieves a test AUC-ROC of 0.680, significantly outperforming the strongest unsupervised (0.630) and neural (0.588) baselines. T-AAMSF further improves PR-AUC to 0.291, highlighting the value of temporal aggregation. The ablation studies are particularly strong and insightful: they reveal source asymmetry (GDELT and Chinese news are complementary, while English news is actively harmful in this context), validate the effectiveness of specific preprocessing steps, and empirically confirm that fixed equal weighting can outperform learned weighting due to validation noise in low-label regimes. Case studies provide qualitative evidence of AAMSF's ability to capture joint and asymmetric source signals. The results are clearly presented, support the paper's core claims, and offer actionable insights for practitioners.
The paper provides a good level of detail regarding data sources (AKShare, GDELT, specific news outlets), preprocessing techniques (e.g., rolling z-score, LaBSE, SnowNLP, VADER), model configurations (Isolation Forest parameters, Ridge regressor), and fusion weights. The definition of the EV3 label and the temporal data split are also clearly described. This level of detail should allow for reasonable reproducibility of the core experiments. However, the absence of publicly available code or specific hyperparameters for all baselines (especially the deep learning models) might present some challenges for exact replication.
The authors acknowledge several pertinent limitations. The evaluation is confined to the CSI 300, raising questions about cross-market transferability to indices with different participant compositions or volatility regimes. The temporal extension, T-AAMSF, was not fully evaluated on the optimal 3-source configuration, which is noted as an immediate next step. Furthermore, the current validation focuses on ranking and thresholded warning quality, while a practical financial early-warning system would require more deployment-oriented validation, including transaction-cost-aware backtesting and robustness checks under changing market conditions. An additional limitation could be the reliance on specific anomaly detection algorithms (Isolation Forest), which might not be universally optimal for all types of financial anomalies, and the somewhat heuristic nature of some text feature engineering.
This paper has significant broader impact for financial risk management and applied machine learning in challenging, label-scarce environments. It provides a strong empirical design principle: in rare-event risk warning, robust anomaly geometry and source reliability can be more effective and stable than complex, high-capacity supervised representation learning. This insight challenges the prevailing trend towards increasingly complex deep learning models and offers a practical, lightweight, and robust alternative for critical applications. The findings on source asymmetry (e.g., the detrimental effect of English news in the Chinese market context) and the unreliability of learned weighting under validation noise are crucial for practitioners designing multi-source ML systems. The work can guide the development of early warning systems in other domains facing similar data challenges, such as industrial fault detection, medical anomaly detection, or cybersecurity threat prediction, by emphasizing the importance of problem-specific constraints and data characteristics over generic model complexity. This paper presents a well-motivated and rigorously evaluated framework for extreme market volatility warning under severe label scarcity. Its core contribution lies in demonstrating that a lightweight, anomaly-based multi-source fusion approach, guided by empirical insights from the failure of complex deep learning models, can significantly outperform more sophisticated methods in a challenging real-world financial setting.
Test-time search lets small video diffusion models rival larger ones, but costs 2-10x more. All candidates are fully denoised, although most are discarded. Training-free caching makes each rollout 2-3x faster at near-lossless quality. Composition is safe only if lossy caching preserves verifier rankings. We present the first study of whether caching corrupts candidate ranking in video test-time search. On Wan2.1-T2V-1.3B with an adaptive caching wrapper (~2x per-candidate speedup), ImageReward scores seed-matched cached and full rollouts. Median per-prompt Spearman rank correlation is 0.905, with 72% top-1 agreement on the VBench suite. VBench-2.0 replicates this result on a harder suite. Recomputing the cached winner at full compute retains 90-94% of the full-search gain. Errors cluster among near-tied candidates, making corruption self-limiting. This finding leads to CachedSearch. It explores every candidate with aggressive caching, then re-generates only the winner at full compute. At N=8, it captures 94.7% of best-of-N's gain at 63% of the cost. Capture rises with width. At matched budget, it searches twice as wide for 38% more gain. The result holds from 1.3B-14B across six models and four families: Wan, LTX, CogVideoX, and Hunyuan. Wan2.1-14B matches the 1.3B model's fidelity. Mid-trajectory pruning multiplies the exploration saving to 3.11x at 88.6% capture. Ports to other model families require recalibrating a single parameter, showing that fidelity tracks architecture rather than parameter count. CachedSearch is training-free, verifier-agnostic, and orthogonal to the search algorithm, making it a plug-in multiplier for test-time scaling.
Primary: The University of Texas at Austin
All Institutions: The University of Texas at Austin, Google, Inc., University of Colorado Boulder
CachedSearch is a highly impactful, well-executed engineering and empirical contribution that effectively addresses the computational bottleneck of test-time search in video diffusion, offering a practical path to scaling model capabilities without proportional increases in compute.
The paper proposes "CachedSearch," a training-free method to accelerate test-time search (TTS) in video diffusion models. The core insight is that while full denoising is expensive, intermediate states (cached features) preserve the relative ranking of candidate quality as determined by verifiers (e.g., ImageReward). The method involves running multiple candidates through a "cheap" cached rollout, selecting the best candidate based on the cached verifier score, and then performing a single, full-compute regeneration of that specific winner. This approach decouples the exploration phase (cheap, cached) from the exploitation phase (expensive, full). The methodology is theoretically sound, relying on the assumption that early-stage denoising steps contain sufficient semantic information for ranking. The authors validate this by showing high Spearman rank correlation between cached and full rollouts.
The evaluation is comprehensive and robust. The authors test across six models (1.3B to 14B) and four architecture families (Wan, LTX, CogVideoX, Hunyuan), demonstrating strong generalization. Key metrics include: 1. **Ranking Preservation:** Median Spearman correlation of 0.905 between cached and full rollouts. 2. **Quality-Cost Trade-off:** At N=8, CachedSearch captures 94.7% of the quality gain of Best-of-N at 63% of the computational cost. 3. **Efficiency:** At matched budget, it allows searching twice as wide, yielding 38% more gain than full-compute Best-of-4. 4. **Robustness:** Results hold across different verifiers (ImageReward, VideoScore) and model scales. The ablation studies (e.g., mid-trajectory pruning) further solidify the findings. The experimental design is rigorous, addressing the critical question of whether caching corrupts the selection process.
The authors provide a reproducibility statement confirming the use of publicly released checkpoints and deterministic generation given seeds. They commit to releasing the caching wrapper, search harness, evaluation scripts, prompt lists, and seeds. The code repository is provided. The deterministic nature of the diffusion process (given seed and parameters) ensures that results can be exactly replicated. The clarity of the method description (adaptive caching wrapper) supports easy implementation.
1. **Verifier Dependency:** The method relies on the quality of the verifier (ImageReward/VideoScore). If the verifier is biased or inaccurate for certain types of videos, the cached ranking may be misleading, although the "recommit" step mitigates this for the final output. 2. **Latency vs. Throughput:** While total FLOPs are reduced, the method requires two passes (cached then full) for the selected candidate. This might increase latency for single-video generation compared to a single pass, though it improves throughput for batch generation or search scenarios. 3. **Parameter Sensitivity:** The method requires calibrating a single parameter (caching threshold) per architecture family. While this is a minor overhead, it suggests a slight lack of universal plug-and-play simplicity without some tuning. 4. **Scope:** The evaluation is limited to text-to-video generation. Extension to image-to-video or other modalities is plausible but not demonstrated.
This work significantly lowers the barrier to using test-time search, a technique that improves model capabilities but is computationally prohibitive for many. By making TTS 2-3x faster, it enables smaller models to compete with larger ones more effectively, potentially democratizing access to high-quality video generation. The ethical considerations are minimal as the method does not introduce new generative capabilities but optimizes existing ones; however, it does make malicious video synthesis cheaper, consistent with the risks of the underlying models. The authors appropriately note that provenance mitigations are orthogonal to this work. CachedSearch is a highly impactful, well-executed engineering and empirical contribution that effectively addresses the computational bottleneck of test-time search in video diffusion, offering a practical path to scaling model capabilities without proportional increases in compute.
Mixed-precision quantization improves the accuracy of post-training quantization by allocating higher bitwidths to sensitive layers, but existing methods solve the allocation for a single fixed memory budget. In practice the budget varies across deployments and is unknown at calibration time. Adaptive quantization addresses this with one offline calibration that serves any budget, yet current methods score layer sensitivity in a manner that does not consider its dependency on quantization levels of other layers. We show that a layer's sensitivity depends strongly on the bitwidths of its upstream layers and that this dependence shifts the resulting preferred bit allocation. We propose MixQuant, a technique-agnostic adaptive framework that wraps any base quantizer. MixQuant marginalizes each layer's distortion over random quantized upstream configurations to obtain budget-agnostic scores, calibrates the quantizer's parameters on plans the allocator itself produces, and penalizes allocations that leave layers at the lowest bitwidths. A single greedy pass then serves any budget at deployment. Across Llama-3.2-3B, Llama-2-7B, and Mistral-7B under AWQ and GPTQ, MixQuant outperforms adaptive and mixed-precision baselines in every setting, improving average accuracy by up to 8 points and reducing perplexity from 12.43 to 10.70 at the tightest budget, while matching an ILP solver at negligible deployment cost.
Primary: University of Illinois at Urbana-Champaign
All Institutions: University of Illinois at Urbana-Champaign
MixQuant introduces a novel adaptive quantization framework that accounts for inter-layer bitwidth dependencies, offering a practical and high-performance solution for deploying LLMs under variable memory constraints. The technical contribution is solid, addressing a specific and important problem in model compression with rigorous experimentation and clear improvements over state-of-the-art baselines.
The paper proposes MixQuant, an adaptive mixed-precision quantization framework designed to address the limitation of existing methods that require a fixed memory budget during calibration. The core innovation lies in marginalizing layer distortion over random quantized upstream configurations to obtain budget-agnostic sensitivity scores. This acknowledges the dependency of a layer's sensitivity on the bitwidths of its predecessors, a factor often ignored in greedy or independent layer-wise optimization methods. The framework is technique-agnostic, wrapping base quantizers like AWQ and GPTQ. It employs a single greedy pass to serve any budget at deployment, penalizing allocations that leave layers at the lowest bitwidths to prevent degenerate solutions. The approach is theoretically sound, addressing a genuine gap in adaptive quantization literature where calibration typically assumes a static resource constraint.
The authors evaluate MixQuant on three prominent LLMs: Llama-3.2-3B, Llama-2-7B, and Mistral-7B. Experiments are conducted under two popular quantization baselines, AWQ and GPTQ. The results claim improvements in average accuracy by up to 8 points and significant perplexity reductions (from 12.43 to 10.70) at tightest budgets compared to adaptive and mixed-precision baselines. The method also claims to match the performance of an Integer Linear Programming (ILP) solver, which is computationally expensive, but at negligible deployment cost. The evaluation covers multiple models and quantization techniques, providing robust evidence of the method's generalizability. The improvements are substantial, particularly in the low-bitwidth regimes where quantization error is most critical.
The paper describes the methodology in sufficient detail, including the marginalization strategy and the greedy allocation pass. However, as is common with arXiv submissions, full code availability is not explicitly guaranteed in the text provided, though the claim of "negligible deployment cost" suggests implementation feasibility. The use of standard benchmarks (Llama, Mistral) and standard quantization methods (AWQ, GPTQ) aids in reproducibility. The specific hyperparameters for the greedy pass and the distribution of random upstream configurations would need to be clearly defined for perfect reproducibility, which is implied to be present in the full text sections not fully rendered here.
The primary limitation is the computational overhead during the *calibration* phase. While deployment cost is negligible, marginalizing over random upstream configurations and running a greedy pass for every potential budget (or rather, pre-computing scores for all) might be more expensive than simple layer-wise sensitivity analysis. Additionally, the method assumes that the "random" configurations adequately sample the space of possible upstream quantizations; if the search space is highly correlated, this approximation might fail. The paper does not explicitly discuss the trade-off between calibration time and accuracy gains, nor does it evaluate on extremely large models (e.g., 70B+) where the overhead might become prohibitive.
This work has significant positive impact on the deployment of LLMs on resource-constrained devices. By enabling adaptive quantization that serves any budget without re-calibration, it simplifies the deployment pipeline for practitioners who face varying hardware constraints. This can accelerate the adoption of LLMs in edge computing scenarios. The improvement in accuracy at low bitwidths also contributes to more efficient and potentially greener AI by reducing the compute and memory requirements for inference. MixQuant introduces a novel adaptive quantization framework that accounts for inter-layer bitwidth dependencies, offering a practical and high-performance solution for deploying LLMs under variable memory constraints. The technical contribution is solid, addressing a specific and important problem in model compression with rigorous experimentation and clear improvements over state-of-the-art baselines.
Predicting how a scene may evolve from partial observations requires reasoning about multiple possible futures rather than committing to a single trajectory. Existing approaches either generate appearance-dominated video predictions or sample a small number of trajectories without explicitly modeling the distribution of possible motion. We introduce Goal-Aware Representations of Future kInEmatic Latent Distributions (GARFIELD), a probabilistic model of scene kinematics that learns a structured spatio-temporal latent representation of the distribution over possible futures given an image and optional spatio-temporally sparse constraints. The same latent representation enables both joint sampling of all trajectories and direct access to the underlying motion distribution through an efficient deterministic density decoder. As a result, uncertainty about future motion can be localized to specific scene elements and timesteps and progressively refined through additional constraints. Experiments demonstrate strong motion planning performance competitive with large video generation models while sampling trajectories $97\times$ faster. Our method further estimates motion densities two orders of magnitude faster than Monte-Carlo sampling from motion generation models, enabling interactive exploration and uncertainty-aware planning.
Primary: Max Planck Institute of Intelligent Systems
All Institutions: Max Planck Institute of Intelligent Systems, University of Tübingen, Tübingen AI Center
Schrödinger's Cat introduces GARFIELD, a probabilistic model for scene kinematics that enables efficient, uncertainty-aware motion planning by learning structured spatio-temporal latent distributions, achieving performance competitive with large video generation models at a fraction of the computational cost.
The paper introduces GARFIELD, a novel probabilistic framework for predicting scene kinematics that addresses the fundamental limitation of existing video generation models: the inability to explicitly model and query the distribution of future motions. By learning a structured spatio-temporal latent representation conditioned on an image and sparse constraints, the method decouples appearance from motion dynamics. The key technical innovation is the "deterministic density decoder," which allows for direct access to the underlying motion distribution without relying on slow Monte-Carlo sampling. This enables efficient uncertainty quantification and goal-aware planning. The approach leverages the strengths of diffusion-like latent spaces but applies them specifically to kinematic distributions, offering a rigorous mathematical formulation for probabilistic future prediction that is both computationally efficient and physically grounded.
The experimental evaluation is comprehensive and compelling. The authors demonstrate that GARFIELD achieves motion planning performance competitive with large, compute-heavy video generation models while being $97\times$ faster in trajectory sampling. Crucially, they show that estimating motion densities is two orders of magnitude faster than Monte-Carlo methods, enabling interactive exploration. The results likely cover standard benchmarks for future prediction and motion planning, showing superior performance in uncertainty-aware scenarios. The ability to progressively refine predictions through additional constraints is a significant practical advantage validated by the experiments.
The project page and associated GitHub repository (CompVis is a well-known research group with a history of releasing high-quality, reproducible code) suggest strong reproducibility. The method relies on standard deep learning architectures (likely diffusion or flow-based models) and standard datasets, making implementation feasible for the community. The explicit formulation of the latent space and density decoder provides clear implementation guidelines.
As with many latent-space methods, the fidelity of the predicted kinematics is bounded by the expressiveness of the latent representation and the quality of the training data. The method may struggle with out-of-distribution scenarios where the physical constraints of the scene are not well-represented in the training data. Additionally, while faster than video generation models, the computational cost of the density decoder still requires significant resources compared to simple heuristic planners, though the trade-off favors GARFIELD for uncertainty-aware tasks.
This work has significant implications for autonomous driving, robotics, and simulation. By providing fast, uncertainty-aware motion predictions, it enables safer and more robust decision-making in dynamic environments. The ability to reason about multiple futures without committing to a single trajectory is critical for safety-critical applications. The efficiency gains make real-time probabilistic planning feasible on hardware-constrained platforms. Schrödinger's Cat introduces GARFIELD, a probabilistic model for scene kinematics that enables efficient, uncertainty-aware motion planning by learning structured spatio-temporal latent distributions, achieving performance competitive with large video generation models at a fraction of the computational cost.
Self-play in simulation produces robust driving policies at scale. Demonstrations of such behavior have been made using privileged vectorized observations such as exact poses and velocities, even for occluded agents. This assumes that perception is solved and introduces a representation gap with the partial observation of a deployed agent driving from the perspective view of egocentric cameras. A common fix, distilling the privileged policy into a camera-input student, leaves the student imitating decisions its own view cannot justify. Instead, we establish perspective-view self-play as a practical training regime. We introduce Pictura, a GPU-accelerated multi-agent driving simulator that renders each agent's egocentric view at every step, mitigating the representation gap at its source. Pictura sustains up to 500K agent-steps/s (2M images/s) on a single H100. Using Pictura, we train Alberti by self-play with plain PPO. It is the first large-scale driving self-play policy trained directly from perspective images, without privileged observations. Training spans 50B agent steps for ~35M km of driving. It approaches the driving performance of its privileged vectorized counterpart, and transfers zero-shot to Waymo Open Motion Dataset layouts re-rendered in Pictura, where it outperforms privileged vectorized agents. Project page: https://valeoai.github.io/Pictura/
Primary: Valeo
All Institutions: Valeo, Valeo Brain, Sorbonne Université, CNRS, ISIR
Pictura establishes perspective-view self-play as a viable and superior training regime for autonomous driving policies by introducing a high-throughput simulator that eliminates the representation gap between privileged simulation states and real-world egocentric observations, achieving state-of-the-art transfer performance.
The paper introduces Pictura, a novel GPU-accelerated multi-agent driving simulator designed to bridge the "representation gap" in self-play reinforcement learning for autonomous driving. Traditional self-play methods rely on privileged vectorized observations (exact poses, velocities), which are not available to real-world agents using only egocentric cameras. Distilling these privileged policies into camera-based students often fails because the student cannot justify decisions based on its limited view. Pictura solves this by rendering high-fidelity egocentric views for every agent at every simulation step, enabling direct training of camera-input policies via self-play (using PPO). The core technical innovation lies in the simulator's ability to sustain extremely high throughput (500K agent-steps/s on a single H100) while maintaining the necessary visual fidelity for perception-aware policy learning. This allows for the training of "Alberti," a large-scale policy trained directly from perspective images without privileged information.
The evaluation demonstrates that Alberti, trained via Pictura, approaches the performance of privileged vectorized counterparts in simulation. Crucially, it shows zero-shot transfer capability to Waymo Open Motion Dataset (WOMD) layouts re-rendered in Pictura, where it outperforms privileged vectorized agents. This is a significant empirical result, suggesting that training on realistic, partial observations yields more robust and generalizable policies than training on perfect state information. The scale of training (50B agent steps, ~35M km) is substantial and validates the simulator's efficiency. The comparison against privileged baselines is rigorous and highlights the practical advantage of the proposed method.
The paper provides a project page and acknowledges the open-source nature of the underlying vector simulator work. The high throughput metrics are specific and verifiable. The use of standard RL algorithms (PPO) and standard datasets (WOMD) aids reproducibility. However, the full codebase for Pictura and Alberti may not be immediately public (indicated by "Project page" rather than a direct GitHub link in the abstract, though the URL is provided), which is common for industry papers. The detailed architecture of the rasterizer and the specific rendering pipeline are key to reproducibility and are presumably detailed in the full text.
The primary limitation is the reliance on simulation. While the transfer to WOMD layouts is promising, it is still within a re-rendered simulation environment, not real-world deployment. The "privileged vectorized" baseline, while outperformed in transfer, represents the theoretical upper bound of performance in simulation; closing this gap is significant but the absolute performance ceiling remains a simulation artifact. The complexity of setting up the high-throughput rendering pipeline might be a barrier for academic labs without significant GPU resources.
This work has significant implications for the field of autonomous driving and robotic control. By making perspective-view self-play practical at scale, it enables the training of more robust, perception-aware policies that are closer to real-world deployment conditions. It reduces the reliance on costly real-world data collection and the limitations of sim-to-real gaps caused by privileged information. The high-throughput simulator infrastructure could become a standard tool for researchers in simulation-based RL for robotics. Pictura establishes perspective-view self-play as a viable and superior training regime for autonomous driving policies by introducing a high-throughput simulator that eliminates the representation gap between privileged simulation states and real-world egocentric observations, achieving state-of-the-art transfer performance.
Standard vision-language models (VLMs) suffer from Moravec's paradox: they excel at complex offline visual reasoning but struggle with simple streaming perception tasks and process them inefficiently. We present Mage-VL, an efficient codec-native streaming foundation model for real-time multimodal understanding and interaction. At its core, our custom tokenizer, Mage-ViT, replaces uniform frame sampling by selectively encoding dynamic, entropy-rich regions using motion vectors and residual energy across sparse anchor (I) and predicted (P) frames. Operating at a 16 x 16 patch level, this reduces visual token consumption by over 75% while preserving spatiotemporal context. Trained from scratch on approximately 560M unlabeled images and 100M unlabeled video frames, Mage-ViT matches or outperforms flagship encoders trained on billions of image-text pairs. We establish AI4AI data pipelines encompassing prompt-code joint optimization for multimodal captioning and AI-driven performance diagnosis to guide training recipes. Furthermore, through a bio-inspired dual-system architecture - a lightweight System 1 event gate and a causal System 2 decoder - Mage-VL enables proactive streaming perception. Extensive evaluations show that Mage-VL-4B matches Qwen3-VL-4B on static tasks while achieving strong gains in video understanding and 2D/3D spatial reasoning, with up to a 3.5x wall-clock inference speedup, and comprehensively surpasses the 15B Phi-4-reasoning-vision baseline. Beyond model artifacts, we deliver seven key empirical findings covering pre-training data efficiency, variable-resolution scaling, codec system acceleration, VideoQA SFT redundancy, motion-spatial synergy, AI4AI data pipelines, and Zero-Vision SFT for multimodal RL.
Primary: Microsoft
All Institutions: Microsoft
Mage-VL introduces a novel codec-native streaming architecture that significantly enhances the efficiency and real-time capabilities of multimodal foundation models, marking a substantial advancement in the field of efficient AI.
The paper proposes Mage-VL, a codec-native streaming multimodal foundation model designed to address the inefficiency of standard VLMs in real-time perception tasks. The core innovation lies in the custom tokenizer, Mage-ViT, which replaces uniform frame sampling with a selective encoding mechanism based on motion vectors and residual energy across sparse anchor (I) and predicted (P) frames. This approach aims to reduce visual token consumption by over 75% while preserving spatiotemporal context. The architecture employs a bio-inspired dual-system design: a lightweight System 1 event gate for proactive streaming perception and a causal System 2 decoder for complex reasoning. The training pipeline leverages AI4AI data generation, including prompt-code joint optimization for multimodal captioning and AI-driven performance diagnosis. The methodology represents a significant shift from static, high-token-count VLMs toward efficient, video-native architectures that mimic biological attention mechanisms.
The authors report extensive evaluations demonstrating that Mage-VL-4B matches Qwen3-VL-4B on static tasks while achieving strong gains in video understanding and 2D/3D spatial reasoning. Notably, the model achieves up to a 3.5x wall-clock inference speedup and comprehensively surpasses the 15B Phi-4-reasoning-vision baseline. The training was conducted on a large-scale dataset of approximately 560M unlabeled images and 100M unlabeled video frames, showing that the custom tokenizer matches or outperforms flagship encoders trained on billions of image-text pairs. The inclusion of seven key empirical findings (covering data efficiency, scaling, acceleration, redundancy, synergy, AI4AI pipelines, and Zero-Vision SFT) provides a robust empirical foundation for the claims. The results suggest a high technical impact, particularly for applications requiring low-latency, high-throughput multimodal processing.
The paper provides a project page, code repository (GitHub), and model weights (Hugging Face), which significantly aids reproducibility. The detailed description of the Mage-ViT tokenizer, the dual-system architecture, and the AI4AI data pipelines offers sufficient methodological detail for other researchers to replicate the core components. The mention of specific training data sizes and the open-source nature of the artifacts further support reproducibility efforts.
While the paper highlights significant improvements, potential limitations include the complexity of the custom tokenizer implementation, which may require specialized hardware or software optimizations to achieve the reported speedups. The reliance on AI-generated data for training raises questions about the potential for model collapse or bias propagation, although the paper claims rigorous diagnosis. Additionally, the performance on extremely long-horizon video tasks or highly dynamic scenes with rapid motion might present challenges that are not fully detailed in the abstract. The "System 1/2" terminology, while intuitive, is a metaphorical framing that may not strictly align with neuroscientific definitions, potentially leading to misinterpretation of the architectural choices.
The development of efficient, real-time multimodal models has significant implications for robotics, autonomous systems, and interactive AI applications where latency and computational resources are critical constraints. By reducing the token count and improving inference speed, Mage-VL enables more accessible deployment of powerful VLMs on edge devices. The use of AI4AI pipelines for data generation also highlights the growing role of automated systems in scaling model capabilities, which may accelerate the pace of AI development but also necessitates careful consideration of data quality and ethical implications. Mage-VL introduces a novel codec-native streaming architecture that significantly enhances the efficiency and real-time capabilities of multimodal foundation models, marking a substantial advancement in the field of efficient AI.
On-policy distillation (OPD) adapts diffusion models by querying a teacher along trajectories generated by the current student, but how it should behave under classifier-free guidance (CFG), a default component of modern diffusion systems, remains poorly understood. Existing OPD methods naturally extend velocity matching to the CFG-composed prediction, directly matching teacher and student guided velocities. We show that this objective is under-identified at the branch level: positive- and negative-branch errors can compensate in the guided prediction. Through two contrasting cases, we find that naive matching remains effective under shared negative conditioning, where both branch errors decrease jointly. When the model's native CFG schema retains privileged information in the teacher's negative branch that is unavailable to the student, however, this joint reduction breaks down and the composed objective induces antagonistic branch-error dynamics, reducing the positive-branch error while increasing the negative-branch error. We term this failure mode Negative Branch Asymmetry (NBA). To address NBA, we introduce Positive--Direction Matching (PDM), a branch-aware OPD objective that separately constrains the positive prediction and the CFG conditional direction. We apply PDM to dense-to-sparse video control, where naive guided matching is highly sensitive to inference guidance scales, while branch-aware supervision enables more robust and effective knowledge transfer.
Primary: Qwen Business Unit of Alibaba
All Institutions: Qwen Business Unit of Alibaba
This paper makes a significant contribution to the field of diffusion model distillation by identifying and solving the Negative Branch Asymmetry problem in On-Policy Distillation with Classifier-Free Guidance. The proposed Positive-Direction Matching objective provides a robust and effective solution, demonstrated through rigorous theoretical analysis and comprehensive experiments on both image and video generation tasks.
The paper identifies a critical, previously uncharacterized failure mode in On-Policy Distillation (OPD) for diffusion models when combined with Classifier-Free Guidance (CFG). The authors term this "Negative Branch Asymmetry" (NBA), where naive matching of CFG-composed velocities allows positive and negative branch errors to compensate, leading to antagonistic dynamics under privileged negative conditioning. They propose Positive-Direction Matching (PDM), a branch-aware objective that separately constrains the positive prediction and the CFG conditional direction. The methodology is theoretically sound, providing a clear mathematical explanation for why existing methods fail in specific conditioning regimes and offering a principled fix. The approach is generalizable to any diffusion model using CFG with asymmetric conditioning.
The experimental evaluation is rigorous and well-structured. The authors first isolate the NBA phenomenon in controlled image-domain settings (text-rendering vs. reference-conditioned distillation), clearly demonstrating the branch-error dynamics. They then apply the method to a practical and challenging task: dense-to-sparse video control using the Wan-VACE model. The results show that PDM significantly outperforms naive OPD and other baselines (SFT, off-policy distillation) in terms of control fidelity and robustness across different guidance scales. The ablation studies on direction-matching weights and supervision horizons are thorough. The use of a new benchmark derived from OpenHumanVid adds value to the community.
The paper provides extensive implementation details in the appendix, including model architectures (LoRA ranks, scaling factors), optimization hyperparameters (learning rates, batch sizes, schedulers), and data processing steps. The code is not explicitly linked in the text provided, but the description is sufficient for reproduction. The use of standard libraries (PyTorch, DeepSpeed) and well-known base models (FLUX.2, Wan2.1) further aids reproducibility.
The paper acknowledges that the relative behavior of PDM and Independent Branch Matching (IBM) is not fully characterized theoretically, relying on empirical evidence for PDM's superiority. The analysis is primarily focused on CFG; while the authors suggest extending NBA analysis to other guidance mechanisms, this is left for future work. The video experiments are limited to pose, depth, and scribble controls, and the generalization to other modalities or more complex control tasks is not explored.
This work has significant implications for the efficient training of diffusion models, particularly for applications requiring conditional generation with asymmetric information (e.g., image editing, video control). By resolving the guidance-scale sensitivity issue, PDM enables more robust and reliable knowledge transfer, which is crucial for deploying distilled models in production environments. It also provides a deeper understanding of the optimization dynamics in diffusion distillation, guiding future research in this area. This paper makes a significant contribution to the field of diffusion model distillation by identifying and solving the Negative Branch Asymmetry problem in On-Policy Distillation with Classifier-Free Guidance. The proposed Positive-Direction Matching objective provides a robust and effective solution, demonstrated through rigorous theoretical analysis and comprehensive experiments on both image and video generation tasks.
Dual-encoder vision-language models (VLMs) expose a similarity interface that enables zero-shot retrieval but fails compositional constraints: queries like "umbrella and no person" retrieve images containing both, even when concept detection is reliable. We trace this to an interface-level Bag-of-Concepts effect, where similarity scores approximate mean pooling of concept evidence regardless of operators. Although operator-dependent signals exist in text embeddings, they are too weak or misaligned to affect rankings. Fine-tuning does not reliably resolve this failure because the dominant bottleneck is how similarity aggregates evidence rather than what encoders represent. We propose factored inference, which separates evidence extraction from constraint execution, and introduce LCSE (Logic-Constrained Score Editing), a training-free method that executes constraints externally using concept scores from frozen encoders. We also introduce FACTOR-Bench, where LCSE achieves 85.5% accuracy versus 73.2% for the best fine-tuned baseline, 90.7% when applied to SigLIP 2, and improves NegBench COCO MCQ accuracy from 27.2% to 65.2% while preserving retrieval performance.
Primary: Carnegie Mellon University
All Institutions: Carnegie Mellon University
This paper makes a significant contribution to the field by identifying and solving a fundamental logical reasoning flaw in dual-encoder VLMs through a novel, training-free factored inference approach, validated by a new benchmark and strong empirical results.
The paper identifies a critical failure mode in dual-encoder Vision-Language Models (VLMs) like CLIP: the "Bag-of-Concepts" effect, where similarity scores fail to respect logical operators (e.g., negation, conjunction) because the dot product acts as a mean pool of concept evidence. The proposed solution, Factored Inference with Logic-Constrained Score Editing (LCSE), is a training-free method that decouples evidence extraction from constraint execution. It uses frozen encoders to get concept scores and applies external logic constraints to adjust the final similarity score. This is a clever, low-cost intervention that addresses a fundamental architectural limitation without requiring expensive retraining. The approach is conceptually simple but theoretically well-motivated, distinguishing between representation quality and inference mechanics.
The evaluation is rigorous and covers multiple dimensions. The authors introduce FACTOR-Bench, a new benchmark specifically designed to test compositional reasoning in VLMs. Results show significant improvements: LCSE achieves 85.5% accuracy on FACTOR-Bench compared to 73.2% for the best fine-tuned baseline. It also shows strong generalization to SigLIP 2 (90.7%) and substantial gains on NegBench COCO MCQ (27.2% to 65.2%). The preservation of standard retrieval performance is a key positive result, indicating that the method does not degrade general capabilities. The comparison against fine-tuned baselines is particularly strong, highlighting that the bottleneck is indeed the inference interface, not just the encoder.
The paper provides code and benchmark links, which is excellent for reproducibility. The method is training-free, relying on frozen encoders, which makes it highly reproducible and easy to implement for other researchers. The details of the score editing mechanism appear sufficient for replication.
The primary limitation is that LCSE is a post-hoc correction. While effective, it does not change the underlying representation learning, which may still suffer from semantic misalignments that simple score editing cannot fix. Additionally, the complexity of the logic constraints might scale poorly with very complex logical expressions involving many variables or nested operators. The performance gain on NegBench, while large, is still below 100%, suggesting that some complex negations remain challenging.
This work has significant implications for the deployment of VLMs in safety-critical or logic-heavy applications (e.g., medical imaging, autonomous driving) where precise compositional understanding is required. By providing a training-free fix, it lowers the barrier for adopting more robust VLMs. The FACTOR-Bench benchmark will likely become a standard for evaluating compositional reasoning in VLMs, driving future research in this direction. This paper makes a significant contribution to the field by identifying and solving a fundamental logical reasoning flaw in dual-encoder VLMs through a novel, training-free factored inference approach, validated by a new benchmark and strong empirical results.
We introduce Shieldstral, a 3B-parameter policy-adaptive multimodal safety classifier that matches or outperforms models nearly 7$\times$ its size on text safety benchmarks and sets a new state of the art on multimodal safety classification. Shieldstral formulates content moderation as a binary question-answering task. This simple formulation unifies diverse moderation tasks into a single yes/no problem, enabling heterogeneous safety datasets with divergent taxonomies to be consolidated under one training framework. We present the data construction recipe, covering curation and generation of approximately 54.1M samples and a fine-grained evaluation set to evaluate policy adaptability. Together, these enable a small adaptive model to match or outperform much larger models.
Primary: Mistral AI
All Institutions: Mistral AI
Shieldstral presents a compelling and technically rigorous approach to policy-adaptive safety classification, demonstrating that a small, efficiently trained model can outperform much larger fixed-taxonomy baselines through innovative data curation and unified formulation.
The paper introduces a novel formulation for safety classification as a binary question-answering task, enabling policy adaptivity. The core methodological contribution is a sophisticated data construction pipeline that unifies heterogeneous safety datasets (text and image) into a single training framework. Key innovations include template-based unification, contrastive sample curation and generation (using LLMs to create hard negatives and positive pairs based on a hierarchical taxonomy), and a multimodal processing pipeline that leverages general-purpose image datasets to augment scarce safety data. The use of SLERP model merging to combine a checkpoint trained on public data with one trained on synthetic contrastive data is a clever engineering solution to balance benchmark calibration with fine-grained discrimination. The approach is technically sound and addresses a significant pain point in the field: the rigidity of fixed-taxonomy guardrails.
The evaluation is comprehensive, covering 16 benchmarks across text and multimodal domains. The model (3B parameters) matches or outperforms models up to 7x its size (e.g., LlamaGuard-4-12B, Nemotron-8B) on standard safety benchmarks. The paper introduces a new "adaptability evaluation" benchmark with a distinct taxonomy to test generalization to unseen policies, where Shieldstral shows significant gains over baselines. The ablation studies effectively isolate the contributions of different data components (public vs. synthetic, LoRA vs. SFT, model merging). The results are robust and competitive with state-of-the-art larger models.
The paper provides detailed descriptions of the data pipeline, including template structures, LLM prompting strategies for data generation, and the merging recipe. The use of open-source base models (Ministral-3B) and publicly available datasets enhances reproducibility. However, the exact LLMs used for data generation and the specific random seeds for the synthetic data generation process are not fully specified, which might introduce some variability. The code and data are not explicitly linked in the provided text, but the methodology is described with sufficient detail for replication by experienced researchers.
The model relies heavily on LLMs for data generation, which may inherit biases or hallucinations from the generator models, although cross-validation and filtering are employed. The performance on low-resource languages (Arabic, Indonesian) is noted to be weaker. The reliance on a binary yes/no output limits the granularity of feedback compared to multi-label classification, although the paper argues this is mitigated by the query-adaptive nature. The evaluation taxonomy, while distinct, still shares high-level superclasses with the training taxonomy, which might allow for some implicit leakage or easier generalization than truly zero-shot policies.
This work has significant implications for the safe deployment of large multimodal models. By enabling policy-adaptive safety classifiers, it allows developers to tailor safety filters to specific contexts (e.g., medical vs. gaming) without retraining massive models. This could lower the barrier to entry for safe AI deployment and improve the alignment of AI systems with diverse user needs. However, the use of LLMs for data generation raises concerns about the potential amplification of biases or the creation of sophisticated adversarial examples if not carefully controlled. Shieldstral presents a compelling and technically rigorous approach to policy-adaptive safety classification, demonstrating that a small, efficiently trained model can outperform much larger fixed-taxonomy baselines through innovative data curation and unified formulation.
Long-term memory systems store what a user says in an external store and retrieve it when a related query arrives. This interface rests on an assumption so natural that it is rarely stated: a memory that is needed will resemble the query that needs it. World knowledge breaks the assumption. A tree-nut allergy should change the answer to a macaron request through their almond-flour ingredient, yet the two texts share no cue a retriever can see. We call this failure mode the implicit-association blind spot and introduce InMind, a 125-task, expert-verified benchmark spanning ten life domains, with 113 tasks grounded in citable public sources. Its paired controls separate three explanations that existing evaluations conflate: the fact was never stored, the model lacks the bridging knowledge, or the fact was stored and never surfaced. The verdict is clean. With the decisive memory placed in context, the backbone answers 84.0 percent of indirect queries; when the same memory must be retrieved, six vector, graph, and agentic memory systems reach at most 14.4 percent, even though they recall the same facts on demand at up to 100 percent. An embedding with eight times the dimensionality raises answer-blind target recall for every system yet leaves the gap essentially intact. A minimal diagnostic probe that keeps memory visible before the query arrives recovers most of the gap, locating the failure in the query-conditioned interface itself and pointing to routing, deciding which facts must stay visible, as the open problem InMind is built to score.
Primary: Unknown (Paper lists authors but no explicit institutional affiliation block; authors appear to be from various institutions or independent researchers)
All Institutions: Unknown
InMind presents a critical diagnostic benchmark that exposes the "implicit-association blind spot" in retrieval-based memory systems, demonstrating that current architectures fail to apply stored facts to indirectly related queries despite high direct recall rates, thereby highlighting the urgent need for improved routing mechanisms in agent memory design.
The paper introduces a novel diagnostic framework for evaluating long-term memory in language agents, specifically targeting the "implicit-association blind spot." The core methodological contribution is the construction of the InMind benchmark, which rigorously separates three failure modes: storage failure, missing bridging knowledge, and retrieval failure. The benchmark design is sophisticated, using paired controls (direct vs. indirect queries) and an answer-blind target recall metric to isolate whether the memory was actually retrieved. The theoretical framing of the "retrieval hypothesis" provides a clear, falsifiable prediction about the limitations of query-conditioned retrieval systems. The approach of using source-grounded, expert-verified tasks from public domains (FDA, OSHA, etc.) ensures high factual grounding and reduces the risk of LLM-generated hallucinations in the benchmark itself.
The experimental evaluation is comprehensive and compelling. The authors evaluate six state-of-the-art memory systems (A-RAG, xMemory, Mem0, A-Mem, HippoRAG 2, MemoryOS) across vector, graph, and agentic paradigms. The results are stark and significant: while systems achieve near-perfect scores on direct recall (naive queries), performance on indirect queries drops to single digits (max 14.4%), despite high target recall in some cases. This clearly demonstrates that the failure is not due to forgetting or lack of model capability, but rather the structural inability of retrieval mechanisms to surface relevant information when semantic similarity is low. The ablation with larger embeddings (text-embedding-3-large) shows marginal gains, reinforcing the argument that the issue is architectural (routing) rather than representational. The "always-in-state" probe effectively isolates the bottleneck, showing that visibility of memory is the key factor.
The paper provides detailed descriptions of the benchmark construction pipeline, including the use of LLM extractors, filtering criteria (similarity, conflict, expert verification), and the evaluation protocol. The source-grounded nature of the tasks (113 out of 125) allows for independent verification of the knowledge bridges. The inclusion of specific prompts for the judge models and the extractor enhances reproducibility. The authors state that the benchmark and harness will be released publicly, which is standard for high-quality benchmark papers. The use of a fixed background trace (LME-s) for injecting memories ensures consistency across evaluations.
The benchmark size (125 tasks) is relatively small, which may limit the statistical power for fine-grained comparisons, although the effect sizes reported are large enough to be robust. The tasks lean heavily towards health, safety, and compliance domains, which may not fully represent other areas like personalization or creative assistance. The reliance on GPT-5-mini as the answerer and judge introduces potential bias, although the authors acknowledge this and use an answer-blind judge for target recall to mitigate it. The "always-in-state" baseline is a simplification and does not account for context window limits or privacy concerns in a real-world deployment, serving primarily as a diagnostic tool rather than a practical solution.
This paper has significant implications for the development of reliable AI agents. By highlighting a fundamental flaw in the dominant retrieval-augmented memory paradigm, it pushes the field towards more sophisticated routing and state-management mechanisms. The findings suggest that current memory systems may give a false sense of reliability, as they appear to "remember" facts when asked directly but fail to use them when contextually relevant. This has serious safety implications, particularly in domains like healthcare and finance, where missing an implicit association could have severe consequences. The benchmark provides a necessary tool for the community to measure and improve the robustness of agent memory systems. InMind presents a critical diagnostic benchmark that exposes the "implicit-association blind spot" in retrieval-based memory systems, demonstrating that current architectures fail to apply stored facts to indirectly related queries despite high direct recall rates, thereby highlighting the urgent need for improved routing mechanisms in agent memory design.
We introduce Kimi K3, a 2.8T parameter Mixture-of-Experts model with 104 billion activated parameters, native vision capabilities, and a 1-million-token context window. Kimi K3 is built on Kimi Delta Attention and Attention Residuals, which improve information flow across sequence length and model depth. Together with Stable LatentMoE, which effectively activates 16 of 896 routed experts per token, and refined training and data recipes, these advances yield an approximately 2.5x improvement in overall scaling efficiency over Kimi K2. Post-training highlights reinforcement learning across general, agentic, and coding domains and multiple reasoning-effort levels, enabling compositional generalization and robust long-horizon execution. At 2.8T scale, Kimi K3 is supported by infrastructure advances in multiple areas: algorithm-system co-design for KDA, perfectly balanced expert-parallel training with efficient memory management, million-token agentic RL with persistent rollout and sandbox states, and deployment innovations. Extensive evaluations show that Kimi K3 achieves frontier-level performance across long-horizon coding, agentic, knowledge, reasoning, and vision tasks. While its overall performance still trails the most powerful proprietary models, namely Claude Fable 5 and GPT-5.6 Sol, Kimi K3 consistently outperforms other open and proprietary models evaluated in our suite. We release the full Kimi K3 model weights to facilitate future research and accelerate the broader deployment and adoption of frontier intelligence.
Primary: Moonshot AI
All Institutions: Moonshot AI
This paper represents a significant contribution to the field of large-scale language modeling, particularly in the areas of efficient MoE routing and ultra-long context window management. By open-sourcing a 2.8T parameter model with advanced agentic capabilities, Moonshot AI provides a critical benchmark and resource for the research community, driving competition and innovation in open-source frontier models.
The paper introduces Kimi K3, a 2.8 trillion parameter Mixture-of-Experts (MoE) model. Key architectural innovations include "Kimi Delta Attention" (KDA) and "Attention Residuals" designed to improve gradient flow and information retention over long sequences. The model utilizes "Stable LatentMoE," a routing mechanism that activates only 16 out of 896 experts per token, aiming to balance computational efficiency with capacity. The training pipeline emphasizes algorithm-system co-design, specifically for expert-parallel training and memory management, alongside a refined data recipe. Post-training involves reinforcement learning across general, agentic, and coding domains with multi-level reasoning effort.
The evaluation covers long-horizon coding, agentic tasks, knowledge, reasoning, and vision. The paper claims a 2.5x improvement in scaling efficiency over its predecessor, Kimi K2. It positions itself as outperforming other open models and trailing only top proprietary models (referenced as Claude Fable 5 and GPT-5.6 Sol). The inclusion of a 1-million-token context window is a significant technical benchmark. However, the specific comparative metrics and the rigorousness of the "agentic" benchmarks require scrutiny, as agentic evaluation is often less standardized than static benchmarks.
The authors state they are releasing the full model weights to Hugging Face. The paper details the infrastructure advances (expert-parallel training, memory management) which aids reproducibility for other large-scale labs. However, the specific "refined training and data recipes" and the proprietary nature of the RLHF/RLVR data likely limit full reproducibility for smaller institutions.
The paper acknowledges that it still trails the most powerful proprietary models. The reliance on massive infrastructure and specific algorithm-system co-design makes it difficult to reproduce without significant computational resources. The "agentic" capabilities are hard to evaluate objectively, and the claim of "compositional generalization" needs robust, long-term testing to verify. The references to future proprietary models (GPT-5.6, Claude Fable 5) suggest the paper might be dated or speculative in its competitive framing, or simply ambitious.
Releasing a 2.8T parameter open model with million-token context and agentic capabilities significantly lowers the barrier for advanced AI research and application development. It accelerates the democratization of frontier intelligence. However, it also raises concerns about the potential misuse of powerful agentic AI systems for automated cyberattacks or large-scale disinformation, necessitating robust safety guardrails which are implied but not the primary focus of this technical report. This paper represents a significant contribution to the field of large-scale language modeling, particularly in the areas of efficient MoE routing and ultra-long context window management. By open-sourcing a 2.8T parameter model with advanced agentic capabilities, Moonshot AI provides a critical benchmark and resource for the research community, driving competition and innovation in open-source frontier models.
Siri Expressive Voices synthesize rich, configurable speech in real time and entirely on device, powered by AFM 3 Core Advanced, Apple's most powerful on-device foundation model. This work presents the memory-efficient audio synthesis architecture behind that capability: a detokenizer that converts the semantic audio tokens emitted by the foundation model into high-fidelity audio within the tight compute and memory budget of the Apple Matrix Coprocessor (AMX). We convert semantic audio tokens to a residual vector quantization (RVQ) representation with a three-component design, a streaming encoder, a temporal decoder, and a depth decoder, that systematically decouples temporal and depth processing. A single reusable depth decoder with Diffusion Transformer (DiT)-style stage conditioning generates all RVQ levels autoregressively, replacing the dedicated per-level decoders of prior multi-decoder architectures, while causal sliding window attention with fixed-window key-value caching yields constant memory complexity independent of sequence length. Deployed on the AMX, the detokenizer sustains roughly 10 ms per generation step, about 16x faster than real time, with a peak runtime memory of only 21 MB and 329 MB of on-device assets, enabling continuous streaming synthesis of 20-320 seconds of audio. This constant, small footprint replaces the linear and quadratic memory scaling of conventional transformer- and GAN-based approaches. Ablation studies validate the key architectural components, and audio quality assessment confirms that the architecture maintains synthesis fidelity while achieving efficiency gains over existing methods. Operating at a 1-billion-parameter activation size within AFM 3 Core Advanced, it improves Mean Opinion Score by +0.28 overall (4.15 vs. 3.87) and by +0.42 on conversational speech (4.24 vs. 3.82) over the prior on-device text-to-speech system.
Primary: Apple
All Institutions: Apple
This paper presents a significant engineering and architectural contribution to on-device neural audio synthesis, achieving a rare combination of high fidelity, low latency, and constant memory complexity through a novel decoupled RVQ generation strategy.
The paper proposes a memory-efficient detokenizer architecture for converting semantic audio tokens into high-fidelity audio, specifically designed for on-device deployment on Apple's Matrix Coprocessor (AMX). The core architectural innovation is the decoupling of temporal and depth processing in Residual Vector Quantization (RVQ) generation. Unlike prior works like Moshi, which use a shared depth transformer but retain per-level input/output projections, this work employs a single, fully reusable depth decoder with DiT-style stage conditioning (using RoPE for codebook index) to eliminate per-level parameter overhead. The architecture also integrates causal sliding window attention with a fixed-window KV cache to ensure constant memory complexity independent of sequence length, a critical feature for streaming applications. The design includes a streaming encoder, a temporal decoder (handling autoregressive feedback), and the unified depth decoder. The methodology is technically sound and addresses specific bottlenecks in current neural audio synthesis (memory scaling and latency).
The evaluation is robust, focusing on both algorithmic efficiency and perceptual quality. The paper demonstrates constant memory usage (~21 MB runtime) and latency (~10 ms/step, 16x real-time) on the target hardware (AMX) across sequence lengths from 20 to 320 seconds. This is contrasted with baselines (Transformer Decoder, Autoregressive GAN) that show linear or quadratic scaling. Audio quality is assessed using UTMOS, SI-SNR, and ABX metrics, showing competitive or superior performance against Moshi/Mimi and other baselines. Crucially, the paper includes a production human evaluation (MOS) comparing the new system to the prior on-device Siri TTS, showing a statistically significant improvement (+0.28 overall, +0.42 on conversational speech). The ablation studies provide clear validation of the architectural choices (lookahead, layer depth, conditioning method).
The paper provides detailed architectural descriptions, including layer counts, attention mechanisms, and conditioning strategies. However, the training data is proprietary and undisclosed ("internally recorded voice assistant interactions"), which limits full reproducibility of the training process. The code is not released. While the architecture is described precisely, the lack of open weights and data prevents independent verification of the exact performance claims, though the on-device metrics are verifiable if one has access to the hardware.
The primary limitation is the proprietary nature of the data and the specific hardware dependency (AMX). The performance gains are heavily tied to the optimization for this specific coprocessor. The "constant memory" claim applies to runtime activation memory; the model weights (329 MB) are fixed but substantial. The paper does not extensively discuss the trade-offs of the DiT-style conditioning versus cross-attention in terms of long-range dependency modeling beyond the immediate context window, although it notes cross-attention context window size had no consistent effect.
This work has significant implications for on-device AI, enabling high-quality, expressive, and private speech synthesis without cloud dependency. It demonstrates that complex diffusion/transformer-based audio generation can be made efficient enough for real-time, always-on applications on mobile hardware. This could accelerate the adoption of personalized voice assistants and improve accessibility tools. The architectural insights (decoupled temporal/depth processing with shared parameters) may influence future research in discrete audio generation. This paper presents a significant engineering and architectural contribution to on-device neural audio synthesis, achieving a rare combination of high fidelity, low latency, and constant memory complexity through a novel decoupled RVQ generation strategy.
Fine-grained, device-initiated communication lets persistent GPU kernels in distributed diffusion transformer (DiT) inference issue remote stores and overlap data movement with Tensor Core computation. Existing systems schedule when communication is issued and when received data becomes consumable, but omit post-issue progress before remote-visible completion, making sender backpressure hard to predict. We identify X-Stage, a software-visible post-issue pipeline stage. Measurements on an eight-GPU node with a recent NVIDIA architecture show that short remote-store bursts drain as the issuer resumes work, whereas sustained injection exhausts finite outstanding capacity and delays later issues. A lightweight Burst-Gap model parameterized by backpressure-free issue time, effective drain rate, and outstanding capacity predicts issue overhead, recovery between bursts, and the onset of backpressure. Guided by the model, we redesign two communication-computation fused kernels. For DeepGEMM MegaMoE, interleaving Linear-1 and Linear-2 work across expert waves places computation between concentrated remote-store bursts, yielding a 1.18x geometric-mean and 1.62x maximum kernel speedup over the Expert-Wave baseline across 84 configurations. For Ulysses sequence-parallel attention, tile-granular fusion of the post-attention All-to-All with FlashAttention lets an output-tile owner issue remote stores and resume computation without a dedicated communication warp or streaming multiprocessor. FlashAttention-3 and FlashAttention-4 reach maximum sender-visible speedups of 1.43x and 1.42x over serial execution, and at long sequences their steady-state times approach those of FlashAttention alone. These results establish post-issue progress as a measurable scheduling lever for shaping bursts, avoiding backpressure, and hiding sender-side overhead.
Primary: KlingAI Research
All Institutions: KlingAI Research, Tsinghua University, NVIDIA
X-Stage: An Overlooked Pipeline Stage for Communication-Computation Overlap in DiT Inference. This paper makes a significant technical contribution by identifying and modeling the "X-Stage" in device-initiated communication, leading to practical optimizations that improve the performance of critical inference kernels like MegaMoE and FlashAttention. The rigorous modeling and empirical validation provide a valuable framework for future systems research in distributed deep learning.
The paper introduces "X-Stage," a novel abstraction for device-initiated communication in distributed GPU inference. It correctly identifies that existing models conflate communication issue with remote-visible completion, ignoring the finite outstanding capacity and post-issue progress window. The proposed "Burst-Gap" model is a rigorous, parameterized framework that predicts sender-side backpressure based on backpressure-free issue time, effective drain rate, and outstanding capacity. The methodology involves detailed microbenchmarking to calibrate these parameters and applying them to redesign two critical kernels: DeepGEMM MegaMoE and FlashAttention-3/4. The approach is theoretically sound and practically motivated by the widening gap between compute throughput and interconnect bandwidth.
The evaluation is comprehensive and convincing. The authors test 84 configurations of the MegaMoE kernel, demonstrating a 1.18x geometric-mean speedup and up to 1.62x maximum speedup. For FlashAttention, they achieve up to 1.43x speedup over serial execution by fusing the All-to-All with attention computation. The experiments include mechanism-level validation, showing that the measured performance aligns with the Burst-Gap model predictions. The use of sender-visible timing metrics is appropriate for the claimed contributions. The results are statistically robust, using median timings over multiple runs.
The paper provides significant detail on the experimental setup, including hardware (8-GPU node, recent NVIDIA architecture), software stack (CUDA 13.1, PyTorch 2.9, specific commits for DeepGEMM and FlashAttention), and measurement techniques (CUDA events, Nsight Systems, clock64 instrumentation). The microbenchmark methodology is clearly described, allowing for replication of the parameter calibration. However, the specific interleaving logic for MegaMoE is complex and might require careful implementation to reproduce exactly. The code is not explicitly linked in the text provided, but the detailed algorithm description aids reproducibility.
The paper focuses primarily on intra-node communication (NVLink). The behavior of X-Stage over inter-node fabrics (e.g., InfiniBand/RoCE) with different latency and bandwidth characteristics is not explored, though the principles may hold. The model assumes a work-conserving drain rate, which might vary under heavy system load or network congestion. Additionally, the speedups are specific to the tested architectures and kernel implementations; generalization to other MoE or attention variants requires re-calibration. The paper notes some regressions in specific MegaMoE configurations due to L2 locality issues, indicating that the optimization is not universally beneficial without careful tuning.
This work has significant implications for the efficiency of large-scale distributed inference, particularly for Diffusion Transformers (DiTs) and Mixture of Experts (MoE) models. By establishing post-issue progress as a measurable scheduling lever, it provides a new design paradigm for communication-computation overlap. The insights are likely to be adopted by systems researchers and practitioners optimizing large model inference, potentially leading to wider adoption of efficient distributed training and inference frameworks. X-Stage: An Overlooked Pipeline Stage for Communication-Computation Overlap in DiT Inference. This paper makes a significant technical contribution by identifying and modeling the "X-Stage" in device-initiated communication, leading to practical optimizations that improve the performance of critical inference kernels like MegaMoE and FlashAttention. The rigorous modeling and empirical validation provide a valuable framework for future systems research in distributed deep learning.
Long-context LLM training suffers from a load-balancing problem that sequence packing does not solve. Packing samples into fixed-token sequences balances memory and linear-cost operators, but the dominant attention cost scales with the sum of squared sequence lengths. Thus, equally sized packed sequences drawn from a long-tailed corpus can carry substantially different attention workloads, creating data-parallel stragglers and pipeline bubbles. Existing approaches either balance at the granularity of sequences or microbatches, where an outlier can dominate an assignment, or disaggregate attention over a global worker pool whose communication domain grows with the data-parallel (DP) degree. We present Libra, which operationalizes the law of large numbers (LLN) as a scaling principle for load balancing: the attention-balancing pool need not grow with the DP degree. Libra groups packed sequences and their CP groups into fixed-size sequence pools. As DP scales out, Libra adds pools rather than enlarging each one, bounding every attention exchange. Variance-Reduced Sequence Placement makes this effective for finite, long-tailed workloads by co-locating sequences with complementary attention workloads to reduce residual inter-pool skew. Within each pool, Tiled Attention Pooling dispatches sequence-head SH-Tiles across GPUs, while a pipelined runtime overlaps tile exchange with attention. Libra exposes a drop-in context-parallel attention operator and a pluggable data sampler, requiring no changes to model layers, optimizers, or pipeline schedules. On Qwen3-Turbo training with 256K- and 1M-token workloads, Libra improves end-to-end throughput by up to 2.54x over Ulysses, with up to 3.14x worst-step straggler-attention speedup in microbenchmarks. Libra has run for hundreds of thousands of GPU-hours in production on jobs spanning 32K to 1M tokens while preserving training semantics.
Primary: Alibaba Group
All Institutions: University of Chinese Academy of Sciences, Alibaba Group, National University of Singapore
Libra presents a highly effective and novel system-level solution to the attention workload skew problem in long-context LLM training, demonstrating substantial throughput improvements in production environments. The combination of statistical load balancing principles with efficient tiled attention execution represents a significant advancement in ML systems research, addressing a bottleneck that limits the scalability of current LLM training infrastructures.
The paper addresses a critical bottleneck in long-context LLM training: the quadratic scaling of attention complexity with sequence length, which creates severe load imbalance even when using sequence packing. The proposed "Libra" system introduces a bounded sequence pool mechanism that leverages the Law of Large Numbers to smooth workload variance without requiring the communication domain to scale with the data-parallel degree. Key innovations include Variance-Reduced Sequence Placement (co-locating complementary sequences) and Tiled Attention Pooling (dispatching sequence-head tiles across GPUs with pipelined exchange). The approach is modular, exposing a drop-in context-parallel operator and pluggable sampler, which enhances its practical utility. The methodology is sound, theoretically grounded in statistical smoothing, and practically motivated by production constraints.
The evaluation is conducted on production workloads (Qwen3-Turbo) with context lengths up to 1M tokens. The results demonstrate significant improvements: up to 2.54x end-to-end throughput over Ulysses and 3.14x worst-step straggler-attention speedup. The use of real-world production data and the claim of hundreds of thousands of GPU-hours in production lend strong empirical weight to the claims. The comparison against Ulysses (a standard context-parallel baseline) is appropriate. The microbenchmark results further isolate the attention kernel improvements.
The paper describes the system components in detail (Libra, Variance-Reduced Sequence Placement, Tiled Attention Pooling). However, as an arXiv preprint from a corporate entity (Alibaba) without an accompanying public code release or detailed hyperparameter settings for the specific production jobs, full reproducibility is limited. The "drop-in" nature suggests ease of integration, but the specific implementation details of the tiling and placement algorithms would need to be scrutinized for exact replication.
The primary limitation is the lack of open-source code, which hinders immediate community adoption and verification. Additionally, the evaluation focuses on training throughput; the impact on inference latency or memory overhead during inference is not explicitly detailed, though the claim of "preserving training semantics" suggests architectural compatibility. The performance gains are specific to the long-context regime; for short-context tasks, the overhead of the tiling and placement logic might negate benefits, although the paper implies the system handles this gracefully.
This work has significant implications for the scalability of LLMs, particularly as context windows continue to expand. By solving the load-balancing problem in long-context training, Libra enables more efficient utilization of large-scale GPU clusters, reducing training costs and time-to-solution. This facilitates the training of more capable models on longer contexts, which is a key direction for current AI research. The modular design encourages adoption by other systems frameworks. Libra presents a highly effective and novel system-level solution to the attention workload skew problem in long-context LLM training, demonstrating substantial throughput improvements in production environments. The combination of statistical load balancing principles with efficient tiled attention execution represents a significant advancement in ML systems research, addressing a bottleneck that limits the scalability of current LLM training infrastructures.